diff --git a/package.json b/package.json
index 8ec96456822..62f638660d6 100644
--- a/package.json
+++ b/package.json
@@ -176,7 +176,7 @@
     "@types/glob": "~8.1.0",
     "@types/inquirer": "^8.0.0",
     "@types/js-yaml": "~4.0.8",
-    "@types/lodash": "4.14.195",
+    "@types/lodash": "4.17.0",
     "@types/node": "~10.12.7",
     "@types/pixi.js": "~4.7.1",
     "@typescript-eslint/eslint-plugin": "~6.18.1",
diff --git a/src/app/core/testing/classes/mock-websocket.service.ts b/src/app/core/testing/classes/mock-websocket.service.ts
index 30e9e6a4a1f..e536b7def0b 100644
--- a/src/app/core/testing/classes/mock-websocket.service.ts
+++ b/src/app/core/testing/classes/mock-websocket.service.ts
@@ -73,11 +73,14 @@ export class MockWebSocketService extends WebSocketService {
 
   mockCall<K extends ApiCallMethod>(method: K, response: CallResponseOrFactory<K>): void {
     const mockedImplementation = (_: K, params: ApiCallParams<K>): Observable<unknown> => {
+      let preparedResponse = response;
       if (response instanceof Function) {
-        return of(response(params));
+        preparedResponse = response(params);
       }
 
-      return of(response);
+      Object.freeze(preparedResponse);
+
+      return of(preparedResponse);
     };
 
     when(this.call).calledWith(method).mockImplementation(mockedImplementation);
@@ -107,10 +110,13 @@ export class MockWebSocketService extends WebSocketService {
         job = response;
       }
 
-      return {
+      job = {
         ...job,
         id: this.jobIdCounter,
-      } as Job<ApiJobResponse<M>>;
+      };
+
+      Object.freeze(job);
+      return job as Job<ApiJobResponse<M>>;
     };
     when(this.startJob).calledWith(method).mockReturnValue(of(this.jobIdCounter));
     when(this.startJob).calledWith(method, anyArgument).mockReturnValue(of(this.jobIdCounter));
diff --git a/src/app/helptext/services/components/service-nfs.ts b/src/app/helptext/services/components/service-nfs.ts
index 9f2453d372a..cb78dff43e5 100644
--- a/src/app/helptext/services/components/service-nfs.ts
+++ b/src/app/helptext/services/components/service-nfs.ts
@@ -35,9 +35,9 @@ export const helptextServiceNfs = {
  href="https://linux.die.net/man/8/rpc.lockd"\
  target="_blank">rpc.lockd(8)</a>.'),
 
-  nfs_srv_16_tooltip: T('Set when a user is a member of more than 16 groups.\
- This assumes group membership is configured correctly\
- on the NFS server.'),
+  userd_manage_gids: T('Enable server-side management of group memberships. \
+ This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client. \
+ This can support more than 16 groups and provide more accurate group memberships.'),
 
   nfs_srv_mountd_log_tooltip: T('Set to log <a\
  href="https://man7.org/linux/man-pages/man8/mountd.8.html"\
diff --git a/src/app/helptext/vm/devices/device-add-edit.ts b/src/app/helptext/vm/devices/device-add-edit.ts
index ea21fe4aa86..a7c6860c131 100644
--- a/src/app/helptext/vm/devices/device-add-edit.ts
+++ b/src/app/helptext/vm/devices/device-add-edit.ts
@@ -46,11 +46,11 @@ export const helptextDevice = {
  assign a port when the VM is started, or set to a\
  fixed, preferred port number.'),
 
-  wait_placeholder: T('Delay VM Boot Until VNC Connects'),
-  wait_tooltip: T('Wait to start VM until VNC client connects.'),
+  wait_placeholder: T('Delay VM Boot Until SPICE Connects'),
+  wait_tooltip: T('Wait to start VM until SPICE client connects.'),
 
-  resolution_tooltip: T('Select a screen resolution to use for VNC sessions.'),
-  bind_tooltip: T('Select an IP address to use for VNC sessions.'),
-  password_tooltip: T('Enter a VNC password to automatically pass to the VNC session.'),
-  web_tooltip: T('Set to enable connecting to the VNC web interface.'),
+  resolution_tooltip: T('Select a screen resolution to use for SPICE sessions.'),
+  bind_tooltip: T('Select an IP address to use for SPICE sessions.'),
+  password_tooltip: T('Enter a SPICE password to automatically pass to the SPICE session.'),
+  web_tooltip: T('Set to enable connecting to the SPICE web interface.'),
 };
diff --git a/src/app/helptext/vm/vm-wizard/vm-wizard.ts b/src/app/helptext/vm/vm-wizard/vm-wizard.ts
index 6191d91c18b..6b609801016 100644
--- a/src/app/helptext/vm/vm-wizard/vm-wizard.ts
+++ b/src/app/helptext/vm/vm-wizard/vm-wizard.ts
@@ -4,7 +4,7 @@ import { helptextGlobal } from 'app/helptext/global-helptext';
 export const helptextVmWizard = {
   os_tooltip: T('Choose the VM operating system type.'),
   name_tooltip: T('Enter an alphanumeric name for the virtual machine.'),
-  password_tooltip: T('Enter a password for the VNC display.'),
+  password_tooltip: T('Enter a password for the SPICE display.'),
   description_tooltip: T('Description (optional).'),
   time_tooltip: T('VM system time. Default is <i>Local</i>.'),
   bootloader_tooltip: T('Select <i>UEFI</i> for newer operating systems or\
@@ -15,8 +15,8 @@ export const helptextVmWizard = {
   autostart_tooltip: T('Set to start this VM when the system boots.'),
   enable_display_tooltip: T('Enable a Display (Virtual Network Computing) remote\
  connection. Requires <i>UEFI</i> booting.'),
-  display_bind_tooltip: T('Select an IP address to use for remote VNC sessions.\
- Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.'),
+  display_bind_tooltip: T('Select an IP address to use for remote SPICE sessions.\
+ Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.'),
   vcpus_warning: T('The product of vCPUs, cores and threads must not exceed {maxVcpus} on this system.'),
   vcpus_tooltip: T('Number of virtual CPUs to allocate to the virtual\
  machine. The VM operating system\
diff --git a/src/app/interfaces/api/api-call-directory.interface.ts b/src/app/interfaces/api/api-call-directory.interface.ts
index 3b99972b68f..439c8d40d9b 100644
--- a/src/app/interfaces/api/api-call-directory.interface.ts
+++ b/src/app/interfaces/api/api-call-directory.interface.ts
@@ -426,7 +426,7 @@ export interface ApiCallDirectory {
   'cronjob.update': { params: [id: number, update: CronjobUpdate]; response: Cronjob };
 
   // Device
-  'device.get_info': { params: [DeviceType]; response: Device[] };
+  'device.get_info': { params: [{ type: DeviceType }]; response: Device[] };
 
   // Directory Services
   'directoryservices.get_state': { params: void; response: DirectoryServicesState };
diff --git a/src/app/interfaces/api/api-event-directory.interface.ts b/src/app/interfaces/api/api-event-directory.interface.ts
index 67395d843df..deee92e48ee 100644
--- a/src/app/interfaces/api/api-event-directory.interface.ts
+++ b/src/app/interfaces/api/api-event-directory.interface.ts
@@ -1,6 +1,6 @@
 import { FailoverStatus } from 'app/enums/failover-status.enum';
 import { Alert } from 'app/interfaces/alert.interface';
-import { ChartRelease, ChartReleaseStats } from 'app/interfaces/chart-release.interface';
+import { ChartRelease, ChartStatisticsUpdate } from 'app/interfaces/chart-release.interface';
 import { PullContainerImageResponse, PullContainerImageParams, ContainerImage } from 'app/interfaces/container-image.interface';
 import { DirectoryServicesState } from 'app/interfaces/directory-services-state.interface';
 import { FailoverDisabledReasonEvent } from 'app/interfaces/failover-disabled-reasons.interface';
@@ -21,7 +21,7 @@ import { ZfsSnapshot } from 'app/interfaces/zfs-snapshot.interface';
 export interface ApiEventDirectory {
   'alert.list': { response: Alert };
   'chart.release.query': { response: ChartRelease };
-  'chart.release.statistics': { response: { id: string; stats: ChartReleaseStats } };
+  'chart.release.statistics': { response: ChartStatisticsUpdate[] };
   'core.get_jobs': { response: Job };
   'directoryservices.status': { response: DirectoryServicesState };
   'failover.status': { response: { status: FailoverStatus } };
diff --git a/src/app/interfaces/chart-release.interface.ts b/src/app/interfaces/chart-release.interface.ts
index f6b61dcfeec..5db60b124b9 100644
--- a/src/app/interfaces/chart-release.interface.ts
+++ b/src/app/interfaces/chart-release.interface.ts
@@ -72,7 +72,11 @@ export interface ChartRelease {
   chart_schema: ChartSchema;
   history: Record<string, ChartReleaseVersion>;
   resources?: ChartResources;
-  stats?: ChartReleaseStats;
+}
+
+export interface ChartStatisticsUpdate {
+  id: string;
+  stats: ChartReleaseStats;
 }
 
 export interface ChartReleaseStats {
diff --git a/src/app/interfaces/cloud-backup.interface.ts b/src/app/interfaces/cloud-backup.interface.ts
index c86d644fd39..3908115f179 100644
--- a/src/app/interfaces/cloud-backup.interface.ts
+++ b/src/app/interfaces/cloud-backup.interface.ts
@@ -45,7 +45,7 @@ export type CloudBackupRestoreParams = [
   snapshot_id: string,
   subfolder: string,
   destination_path: string,
-  {
+  settings: {
     exclude: string[];
     include?: string[];
   },
diff --git a/src/app/modules/dialog/components/multi-error-dialog/multi-error-dialog.component.html b/src/app/modules/dialog/components/multi-error-dialog/multi-error-dialog.component.html
index 7299a521921..42d86a9040a 100644
--- a/src/app/modules/dialog/components/multi-error-dialog/multi-error-dialog.component.html
+++ b/src/app/modules/dialog/components/multi-error-dialog/multi-error-dialog.component.html
@@ -1,4 +1,4 @@
-<h1 mat-dialog-title>Multiple Errors</h1>
+<h1 mat-dialog-title>{{ 'Multiple Errors' | translate }}</h1>
 <div
   class="multi-error-dialog"
   mat-dialog-content
@@ -15,7 +15,7 @@ <h1 mat-dialog-title>Multiple Errors</h1>
     ></ix-error-template>
     <mat-divider></mat-divider>
   </ng-container>
-  
+
 </div>
 <div mat-dialog-actions>
   <button
diff --git a/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.component.html b/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.component.html
index 109fc1a6812..cd8f3557010 100644
--- a/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.component.html
+++ b/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.component.html
@@ -9,6 +9,7 @@
   [matBadge]="jobBadgeCount"
   [matBadgeHidden]="jobBadgeCount === 0"
   [matTooltip]="tooltips.task_manager | translate"
+  [ixUiSearch]="searchableElements.elements.jobs"
   (click)="onIndicatorPressed()"
 >
   <ix-icon name="assignment"></ix-icon>
diff --git a/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.component.ts b/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.component.ts
index 72208c59a60..7bdd09f8bd4 100644
--- a/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.component.ts
+++ b/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.component.ts
@@ -7,6 +7,7 @@ import { helptextTopbar } from 'app/helptext/topbar';
 import { JobsPanelComponent } from 'app/modules/jobs/components/jobs-panel/jobs-panel.component';
 import { jobPanelClosed } from 'app/modules/jobs/store/job.actions';
 import { selectIsJobPanelOpen, selectRunningJobsCount } from 'app/modules/jobs/store/job.selectors';
+import { jobsElements } from 'app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.elements';
 import { topbarDialogPosition } from 'app/modules/layout/components/topbar/topbar-dialog-position.constant';
 import { AppState } from 'app/store';
 import { jobIndicatorPressed } from 'app/store/topbar/topbar.actions';
@@ -22,6 +23,7 @@ export class JobsIndicatorComponent implements OnInit {
 
   jobBadgeCount$ = this.store$.select(selectRunningJobsCount);
   isJobPanelOpen$ = this.store$.select(selectIsJobPanelOpen);
+  protected readonly searchableElements = jobsElements;
 
   constructor(
     private matDialog: MatDialog,
diff --git a/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.elements.ts b/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.elements.ts
new file mode 100644
index 00000000000..f634c66de50
--- /dev/null
+++ b/src/app/modules/layout/components/topbar/jobs-indicator/jobs-indicator.elements.ts
@@ -0,0 +1,11 @@
+import { marker as T } from '@biesbjerg/ngx-translate-extract-marker';
+import { UiSearchableElement } from 'app/modules/global-search/interfaces/ui-searchable-element.interface';
+
+export const jobsElements = {
+  hierarchy: [T('Toolbar')],
+  elements: {
+    jobs: {
+      hierarchy: [T('Jobs History')],
+    },
+  },
+} satisfies UiSearchableElement;
diff --git a/src/app/modules/layout/components/topbar/power-menu/power-menu.component.html b/src/app/modules/layout/components/topbar/power-menu/power-menu.component.html
index b54d8f898b8..925575b6ebc 100644
--- a/src/app/modules/layout/components/topbar/power-menu/power-menu.component.html
+++ b/src/app/modules/layout/components/topbar/power-menu/power-menu.component.html
@@ -5,11 +5,18 @@
   ixTest="power-menu"
   [matTooltip]="tooltips.power | translate"
   [matMenuTriggerFor]="powerMenu"
+  [ixUiSearch]="searchableElements.elements.powerMenu"
 >
   <ix-icon name="power_settings_new"></ix-icon>
 </button>
 <mat-menu #powerMenu="matMenu">
-  <button name="power-log-out" mat-menu-item ixTest="log-out" (click)="onSignOut()">
+  <button
+    name="power-log-out"
+    mat-menu-item
+    ixTest="log-out"
+    [ixUiSearch]="searchableElements.elements.logOut"
+    (click)="onSignOut()"
+  >
     <ix-icon name="exit_to_app"></ix-icon>
     {{ 'Log Out' | translate }}
   </button>
@@ -19,6 +26,7 @@
     name="power-restart"
     mat-menu-item
     ixTest="restart"
+    [ixUiSearch]="searchableElements.elements.restart"
     (click)="onReboot()"
   >
     <ix-icon name="replay"></ix-icon>
@@ -30,6 +38,7 @@
     name="power-shut-down"
     mat-menu-item
     ixTest="shut-down"
+    [ixUiSearch]="searchableElements.elements.shutDown"
     (click)="onShutdown()"
   >
     <ix-icon name="power_settings_new"></ix-icon>
diff --git a/src/app/modules/layout/components/topbar/power-menu/power-menu.component.ts b/src/app/modules/layout/components/topbar/power-menu/power-menu.component.ts
index d0bad3d0790..47e81b409dd 100644
--- a/src/app/modules/layout/components/topbar/power-menu/power-menu.component.ts
+++ b/src/app/modules/layout/components/topbar/power-menu/power-menu.component.ts
@@ -6,6 +6,7 @@ import { filter } from 'rxjs/operators';
 import { Role } from 'app/enums/role.enum';
 import { helptextTopbar } from 'app/helptext/topbar';
 import { DialogService } from 'app/modules/dialog/dialog.service';
+import { powerMenuElements } from 'app/modules/layout/components/topbar/power-menu/power-menu.elements';
 import { AuthService } from 'app/services/auth/auth.service';
 import { WebSocketConnectionService } from 'app/services/websocket-connection.service';
 
@@ -16,9 +17,9 @@ import { WebSocketConnectionService } from 'app/services/websocket-connection.se
   changeDetection: ChangeDetectionStrategy.OnPush,
 })
 export class PowerMenuComponent {
-  readonly tooltips = helptextTopbar.mat_tooltips;
-
+  protected readonly tooltips = helptextTopbar.mat_tooltips;
   protected readonly requiredRoles = [Role.FullAdmin];
+  protected searchableElements = powerMenuElements;
 
   constructor(
     private authService: AuthService,
diff --git a/src/app/modules/layout/components/topbar/power-menu/power-menu.elements.ts b/src/app/modules/layout/components/topbar/power-menu/power-menu.elements.ts
new file mode 100644
index 00000000000..d2f15a02482
--- /dev/null
+++ b/src/app/modules/layout/components/topbar/power-menu/power-menu.elements.ts
@@ -0,0 +1,22 @@
+import { marker as T } from '@biesbjerg/ngx-translate-extract-marker';
+import { UiSearchableElement } from 'app/modules/global-search/interfaces/ui-searchable-element.interface';
+
+export const powerMenuElements = {
+  hierarchy: [T('Toolbar'), T('Power Menu')],
+  synonyms: [T('Toolbar')],
+  triggerAnchor: 'power-menu',
+  elements: {
+    powerMenu: {
+      anchor: 'power-menu',
+    },
+    logOut: {
+      hierarchy: [T('LogOut')],
+    },
+    restart: {
+      hierarchy: [T('Restart')],
+    },
+    shutDown: {
+      hierarchy: [T('Shut Down')],
+    },
+  },
+} satisfies UiSearchableElement;
diff --git a/src/app/modules/layout/components/topbar/topbar.component.html b/src/app/modules/layout/components/topbar/topbar.component.html
index ec5b91d6c0c..5cf51258781 100644
--- a/src/app/modules/layout/components/topbar/topbar.component.html
+++ b/src/app/modules/layout/components/topbar/topbar.component.html
@@ -33,6 +33,7 @@
         class="topbar-button-right"
         ixTest="leave-feedback"
         [matTooltip]="'Send Feedback' | translate"
+        [ixUiSearch]="searchableElements.elements.sendFeedback"
         (click)="onFeedbackIndicatorPressed()"
       >
         <ix-icon name="mdi-emoticon"></ix-icon>
@@ -70,6 +71,7 @@
         [matBadge]="alertBadgeCount"
         [matBadgeHidden]="alertBadgeCount === 0"
         [matTooltip]="tooltips.alerts | translate"
+        [ixUiSearch]="searchableElements.elements.alerts"
         (click)="onAlertIndicatorPressed()"
       >
         <ix-icon name="notifications"></ix-icon>
diff --git a/src/app/modules/layout/components/topbar/topbar.component.ts b/src/app/modules/layout/components/topbar/topbar.component.ts
index e8a0a333a2f..517825c5551 100644
--- a/src/app/modules/layout/components/topbar/topbar.component.ts
+++ b/src/app/modules/layout/components/topbar/topbar.component.ts
@@ -14,6 +14,7 @@ import { UpdateDialogComponent } from 'app/modules/dialog/components/update-dial
 import { FeedbackDialogComponent } from 'app/modules/feedback/components/feedback-dialog/feedback-dialog.component';
 import { selectUpdateJob } from 'app/modules/jobs/store/job.selectors';
 import { topbarDialogPosition } from 'app/modules/layout/components/topbar/topbar-dialog-position.constant';
+import { toolBarElements } from 'app/modules/layout/components/topbar/topbar.elements';
 import { SystemGeneralService } from 'app/services/system-general.service';
 import { ThemeService } from 'app/services/theme/theme.service';
 import { selectIsHaLicensed } from 'app/store/ha-info/ha-info.selectors';
@@ -35,6 +36,7 @@ export class TopbarComponent implements OnInit {
   systemWillRestart = false;
   updateNotificationSent = false;
   tooltips = helptextTopbar.mat_tooltips;
+  protected searchableElements = toolBarElements;
 
   alertBadgeCount$ = this.store$.select(selectImportantUnreadAlertsCount);
 
diff --git a/src/app/modules/layout/components/topbar/topbar.elements.ts b/src/app/modules/layout/components/topbar/topbar.elements.ts
new file mode 100644
index 00000000000..7fd380a6c05
--- /dev/null
+++ b/src/app/modules/layout/components/topbar/topbar.elements.ts
@@ -0,0 +1,14 @@
+import { marker as T } from '@biesbjerg/ngx-translate-extract-marker';
+import { UiSearchableElement } from 'app/modules/global-search/interfaces/ui-searchable-element.interface';
+
+export const toolBarElements = {
+  hierarchy: [T('Toolbar')],
+  elements: {
+    sendFeedback: {
+      hierarchy: [T('Send Feedback')],
+    },
+    alerts: {
+      hierarchy: [T('Alerts')],
+    },
+  },
+} satisfies UiSearchableElement;
diff --git a/src/app/modules/layout/components/topbar/user-menu/user-menu.component.html b/src/app/modules/layout/components/topbar/user-menu/user-menu.component.html
index 85b3ab90000..c0148203a34 100644
--- a/src/app/modules/layout/components/topbar/user-menu/user-menu.component.html
+++ b/src/app/modules/layout/components/topbar/user-menu/user-menu.component.html
@@ -5,6 +5,7 @@
     class="topbar-button-right"
     ixTest="user-menu"
     [matTooltip]="tooltips.settings | translate"
+    [ixUiSearch]="searchableElements.elements.userMenu"
     [matMenuTriggerFor]="userMenu"
   >
     <span
@@ -25,6 +26,7 @@
       name="settings-change-password"
       mat-menu-item
       ixTest="change-password"
+      [ixUiSearch]="searchableElements.elements.changePassword"
       (click)="openChangePasswordDialog()"
     >
       <ix-icon name="dialpad"></ix-icon>
@@ -52,12 +54,19 @@
       href="https://www.truenas.com/docs/"
       target="_blank"
       ixTest="guide"
+      [ixUiSearch]="searchableElements.elements.guide"
     >
       <ix-icon name="library_books"></ix-icon>
       {{ 'Guide' | translate }}
     </a>
 
-    <button name="settings-about" mat-menu-item ixTest="about" (click)="onShowAbout()">
+    <button
+      name="settings-about"
+      mat-menu-item
+      ixTest="about"
+      [ixUiSearch]="searchableElements.elements.about"
+      (click)="onShowAbout()"
+    >
       <ix-icon name="info_outline"></ix-icon>
       {{ 'About' | translate }}
     </button>
diff --git a/src/app/modules/layout/components/topbar/user-menu/user-menu.component.ts b/src/app/modules/layout/components/topbar/user-menu/user-menu.component.ts
index 775c36362bb..ef0038e3082 100644
--- a/src/app/modules/layout/components/topbar/user-menu/user-menu.component.ts
+++ b/src/app/modules/layout/components/topbar/user-menu/user-menu.component.ts
@@ -10,6 +10,7 @@ import { AboutDialogComponent } from 'app/modules/layout/components/topbar/about
 import {
   ChangePasswordDialogComponent,
 } from 'app/modules/layout/components/topbar/change-password-dialog/change-password-dialog.component';
+import { userMenuElements } from 'app/modules/layout/components/topbar/user-menu/user-menu.elements';
 import { AuthService } from 'app/services/auth/auth.service';
 
 @Component({
@@ -21,6 +22,7 @@ import { AuthService } from 'app/services/auth/auth.service';
 export class UserMenuComponent {
   readonly tooltips = helptextTopbar.mat_tooltips;
   loggedInUser$ = this.authService.user$.pipe(filter(Boolean));
+  protected searchableElements = userMenuElements;
 
   constructor(
     private matDialog: MatDialog,
diff --git a/src/app/modules/layout/components/topbar/user-menu/user-menu.elements.ts b/src/app/modules/layout/components/topbar/user-menu/user-menu.elements.ts
new file mode 100644
index 00000000000..2363f82cddf
--- /dev/null
+++ b/src/app/modules/layout/components/topbar/user-menu/user-menu.elements.ts
@@ -0,0 +1,22 @@
+import { marker as T } from '@biesbjerg/ngx-translate-extract-marker';
+import { UiSearchableElement } from 'app/modules/global-search/interfaces/ui-searchable-element.interface';
+
+export const userMenuElements = {
+  hierarchy: [T('Toolbar'), T('Settings Menu')],
+  synonyms: [T('Toolbar')],
+  triggerAnchor: 'user-menu',
+  elements: {
+    userMenu: {
+      anchor: 'user-menu',
+    },
+    changePassword: {
+      hierarchy: [T('Change Password')],
+    },
+    guide: {
+      hierarchy: [T('Guide')],
+    },
+    about: {
+      hierarchy: [T('About')],
+    },
+  },
+} satisfies UiSearchableElement;
diff --git a/src/app/modules/truecommand/truecommand-button.component.html b/src/app/modules/truecommand/truecommand-button.component.html
index b38052d096c..e92ef7b0fae 100644
--- a/src/app/modules/truecommand/truecommand-button.component.html
+++ b/src/app/modules/truecommand/truecommand-button.component.html
@@ -16,13 +16,13 @@
 <button
   *ngIf="tcStatus && tcStatus.status !== TrueCommandStatus.Connecting"
   mat-icon-button
-  id="tc-status"
   class="topbar-button-right truecommand-button"
   ixTest="truecommand-indicator"
   matBadgeSize="small"
   [matTooltip]="tooltips.tc_status | translate"
   [matBadge]="tcsStatusMatBadge"
   [ngClass]="[tcStatus.status]"
+  [ixUiSearch]="searchableElements.elements.trueCommand"
   (click)="handleClick()"
 >
   <ix-icon name="ix:logo_truecommand_white"></ix-icon>
diff --git a/src/app/modules/truecommand/truecommand-button.component.ts b/src/app/modules/truecommand/truecommand-button.component.ts
index 600647c5aa9..7a32a0ea5ec 100644
--- a/src/app/modules/truecommand/truecommand-button.component.ts
+++ b/src/app/modules/truecommand/truecommand-button.component.ts
@@ -20,6 +20,7 @@ import {
   TruecommandSignupModalComponent,
 } from 'app/modules/truecommand/components/truecommand-signup-modal/truecommand-signup-modal.component';
 import { TruecommandStatusModalComponent } from 'app/modules/truecommand/components/truecommand-status-modal/truecommand-status-modal.component';
+import { trueCommandElements } from 'app/modules/truecommand/truecommand-button.elements';
 import { ErrorHandlerService } from 'app/services/error-handler.service';
 import { WebSocketService } from 'app/services/ws.service';
 
@@ -33,6 +34,7 @@ import { WebSocketService } from 'app/services/ws.service';
 export class TruecommandButtonComponent implements OnInit {
   readonly TrueCommandStatus = TrueCommandStatus;
   tooltips = helptextTopbar.mat_tooltips;
+  protected searchableElements = trueCommandElements;
 
   tcStatus: TrueCommandConfig;
 
diff --git a/src/app/modules/truecommand/truecommand-button.elements.ts b/src/app/modules/truecommand/truecommand-button.elements.ts
new file mode 100644
index 00000000000..ccc1641328b
--- /dev/null
+++ b/src/app/modules/truecommand/truecommand-button.elements.ts
@@ -0,0 +1,13 @@
+import { marker as T } from '@biesbjerg/ngx-translate-extract-marker';
+import { UiSearchableElement } from 'app/modules/global-search/interfaces/ui-searchable-element.interface';
+
+export const trueCommandElements = {
+  hierarchy: [T('Toolbar')],
+  elements: {
+    trueCommand: {
+      hierarchy: [T('Status of TrueCommand')],
+      synonyms: [T('TrueCommand')],
+      anchor: 'tc-status',
+    },
+  },
+} satisfies UiSearchableElement;
diff --git a/src/app/pages/account/groups/privilege/privilege-form/privilege-form.component.ts b/src/app/pages/account/groups/privilege/privilege-form/privilege-form.component.ts
index a99b8c99f50..9738cee0888 100644
--- a/src/app/pages/account/groups/privilege/privilege-form/privilege-form.component.ts
+++ b/src/app/pages/account/groups/privilege/privilege-form/privilege-form.component.ts
@@ -51,7 +51,7 @@ export class PrivilegeFormComponent implements OnInit {
 
   readonly rolesOptions$ = this.ws.call('privilege.roles').pipe(
     map((roles) => {
-      const sortedRoles = roles.sort((a, b) => {
+      const sortedRoles = roles.toSorted((a, b) => {
         // Show compound roles first, then sort by name.
         if (a.builtin === b.builtin) {
           return a.name.localeCompare(b.name);
diff --git a/src/app/pages/apps/components/apps-scope-wrapper.component.ts b/src/app/pages/apps/components/apps-scope-wrapper.component.ts
index c55f77427c1..7f1c04d67b7 100644
--- a/src/app/pages/apps/components/apps-scope-wrapper.component.ts
+++ b/src/app/pages/apps/components/apps-scope-wrapper.component.ts
@@ -1,5 +1,6 @@
 import { ChangeDetectionStrategy, Component, OnDestroy } from '@angular/core';
 import { AppsFilterStore } from 'app/pages/apps/store/apps-filter-store.service';
+import { AppsStatisticsService } from 'app/pages/apps/store/apps-statistics.service';
 import { AppsStore } from 'app/pages/apps/store/apps-store.service';
 import { InstalledAppsStore } from 'app/pages/apps/store/installed-apps-store.service';
 import { KubernetesStore } from 'app/pages/apps/store/kubernetes-store.service';
@@ -10,6 +11,7 @@ import { KubernetesStore } from 'app/pages/apps/store/kubernetes-store.service';
   providers: [
     AppsFilterStore,
     InstalledAppsStore,
+    AppsStatisticsService,
     KubernetesStore,
     AppsStore,
   ],
diff --git a/src/app/pages/apps/components/chart-wizard/chart-wizard.component.ts b/src/app/pages/apps/components/chart-wizard/chart-wizard.component.ts
index 0f8393651b5..ea8201c8b44 100644
--- a/src/app/pages/apps/components/chart-wizard/chart-wizard.component.ts
+++ b/src/app/pages/apps/components/chart-wizard/chart-wizard.component.ts
@@ -162,8 +162,10 @@ export class ChartWizardComponent implements OnInit, OnDestroy {
       .pipe(this.loader.withLoader(), untilDestroyed(this))
       .subscribe({
         next: (app) => {
-          app.schema = app.versions[app.latest_version].schema;
-          this.setChartForCreation(app);
+          this.setChartForCreation({
+            ...app,
+            schema: app.versions[app.latest_version].schema,
+          });
           this.afterAppLoaded();
         },
         error: (error: WebSocketError) => this.afterAppLoadError(error),
diff --git a/src/app/pages/apps/components/installed-apps/app-row/app-row.component.html b/src/app/pages/apps/components/installed-apps/app-row/app-row.component.html
index 80a0773c35d..35a7c236298 100644
--- a/src/app/pages/apps/components/installed-apps/app-row/app-row.component.html
+++ b/src/app/pages/apps/components/installed-apps/app-row/app-row.component.html
@@ -28,20 +28,20 @@
   ></ix-app-status-cell>
 </div>
 <div class="cell cell-cpu" [matTooltip]="'Percentage of total core utilization' | translate">
-  <span *ngIf="app.stats && app.stats.cpu !== undefined; else notAvailable">
-    {{ app.stats.cpu.toFixed(0) }}%
+  <span *ngIf="stats && stats.cpu !== undefined; else notAvailable">
+    {{ stats.cpu.toFixed(0) }}%
   </span>
 </div>
 <div class="cell cell-ram" [matTooltip]="'Memory usage of app' | translate">
-  <span *ngIf="app.stats && app.stats.memory !== undefined; else notAvailable">
-    {{ app.stats.memory | ixFileSize }}
+  <span *ngIf="stats && stats.memory !== undefined; else notAvailable">
+    {{ stats.memory | ixFileSize }}
   </span>
 </div>
 <div class="cell cell-network" [matTooltip]="'Incoming / Outgoing network traffic' | translate">
-  <span *ngIf="app.stats && app.stats.network?.incoming !== undefined; else notAvailable">
-    {{ app.stats.network.incoming | ixFileSize: { baseUnit: 'b', base: 10 } }}/s
+  <span *ngIf="stats && stats.network?.incoming !== undefined; else notAvailable">
+    {{ stats.network.incoming | ixFileSize: { baseUnit: 'b', base: 10 } }}/s
     -
-    {{ app.stats.network.outgoing | ixFileSize: { baseUnit: 'b', base: 10 } }}/s
+    {{ stats.network.outgoing | ixFileSize: { baseUnit: 'b', base: 10 } }}/s
   </span>
 </div>
 <div class="cell cell-update">
diff --git a/src/app/pages/apps/components/installed-apps/app-row/app-row.component.spec.ts b/src/app/pages/apps/components/installed-apps/app-row/app-row.component.spec.ts
index b0c2ba58a13..5f82b19f0e8 100644
--- a/src/app/pages/apps/components/installed-apps/app-row/app-row.component.spec.ts
+++ b/src/app/pages/apps/components/installed-apps/app-row/app-row.component.spec.ts
@@ -4,7 +4,7 @@ import { ImgFallbackModule } from 'ngx-img-fallback';
 import { officialCatalog } from 'app/constants/catalog.constants';
 import { mockAuth } from 'app/core/testing/utils/mock-auth.utils';
 import { ChartReleaseStatus } from 'app/enums/chart-release-status.enum';
-import { ChartRelease } from 'app/interfaces/chart-release.interface';
+import { ChartRelease, ChartReleaseStats } from 'app/interfaces/chart-release.interface';
 import { AppRowComponent } from 'app/pages/apps/components/installed-apps/app-row/app-row.component';
 import { AppStatusCellComponent } from 'app/pages/apps/components/installed-apps/app-status-cell/app-status-cell.component';
 import { AppStatus } from 'app/pages/apps/enum/app-status.enum';
@@ -17,16 +17,17 @@ describe('AppRowComponent', () => {
     status: ChartReleaseStatus.Active,
     chart_metadata: { icon: 'https://image/' },
     catalog: officialCatalog,
-    stats: {
-      cpu: 50.155,
-      memory: 20000000,
-      network: {
-        incoming: 50000000,
-        outgoing: 55500000,
-      },
-    },
   } as ChartRelease;
 
+  const stats = {
+    cpu: 50.155,
+    memory: 20000000,
+    network: {
+      incoming: 50000000,
+      outgoing: 55500000,
+    },
+  } as ChartReleaseStats;
+
   const status = AppStatus.Started;
 
   const createComponent = createComponentFactory({
@@ -42,27 +43,27 @@ describe('AppRowComponent', () => {
 
   beforeEach(() => {
     spectator = createComponent({
-      props: { app, status },
+      props: { app, status, stats },
     });
   });
 
-  it('checks app logo, name and catalog', () => {
+  it('shows app name, logo and catalog', () => {
     expect(spectator.query('.app-logo img')).toHaveAttribute('src', 'https://image/');
     expect(spectator.query('.app-name')).toHaveText('app_name');
     expect(spectator.query('.app-catalog')).toHaveText('TrueNAS');
   });
 
-  it('checks app status column', () => {
+  it('shows app status', () => {
     const statusCell = spectator.query(AppStatusCellComponent);
     expect(statusCell).toBeTruthy();
     expect(statusCell.appStatus).toBe(status);
   });
 
-  it('checks app update column', () => {
+  it('is shows app up to date status', () => {
     expect(spectator.query('.cell-update')).toHaveText('Up to date');
   });
 
-  it('checks usage columns', () => {
+  it('shows app usages statistics', () => {
     expect(spectator.query('.cell-cpu')).toHaveText('50%');
     expect(spectator.query('.cell-ram')).toHaveText('19.07 MiB');
     expect(spectator.query('.cell-network')).toHaveText('50 Mb/s - 55.5 Mb/s');
diff --git a/src/app/pages/apps/components/installed-apps/app-row/app-row.component.ts b/src/app/pages/apps/components/installed-apps/app-row/app-row.component.ts
index 034ced62449..27decc3f960 100644
--- a/src/app/pages/apps/components/installed-apps/app-row/app-row.component.ts
+++ b/src/app/pages/apps/components/installed-apps/app-row/app-row.component.ts
@@ -5,7 +5,7 @@ import {
 import { appImagePlaceholder } from 'app/constants/catalog.constants';
 import { Role } from 'app/enums/role.enum';
 import { ChartScaleQueryParams, ChartScaleResult } from 'app/interfaces/chart-release-event.interface';
-import { ChartRelease } from 'app/interfaces/chart-release.interface';
+import { ChartRelease, ChartReleaseStats } from 'app/interfaces/chart-release.interface';
 import { Job } from 'app/interfaces/job.interface';
 import { AppStatus } from 'app/pages/apps/enum/app-status.enum';
 
@@ -17,6 +17,7 @@ import { AppStatus } from 'app/pages/apps/enum/app-status.enum';
 })
 export class AppRowComponent {
   @Input() app: ChartRelease;
+  @Input() stats: ChartReleaseStats;
   @Input() status: AppStatus;
   @Input() selected: boolean;
   @Input() job?: Job<ChartScaleResult, ChartScaleQueryParams>;
diff --git a/src/app/pages/apps/components/installed-apps/installed-apps.component.html b/src/app/pages/apps/components/installed-apps/installed-apps.component.html
index 9de0671a292..2f5ac9f3b3a 100644
--- a/src/app/pages/apps/components/installed-apps/installed-apps.component.html
+++ b/src/app/pages/apps/components/installed-apps/installed-apps.component.html
@@ -176,6 +176,7 @@ <h2>{{ 'Applications' | translate }}</h2>
               [class.selected]="selectedApp.id === app.id"
               [selected]="selection.isSelected(app.id)"
               [status]="getAppStatus(app.name)"
+              [stats]="getAppStats(app.name) | async"
               [job]="appJobs.get(app.name)"
               (startApp)="start(app.name)"
               (stopApp)="stop(app.name)"
diff --git a/src/app/pages/apps/components/installed-apps/installed-apps.component.spec.ts b/src/app/pages/apps/components/installed-apps/installed-apps.component.spec.ts
index db733dcacba..803b9dabcb5 100644
--- a/src/app/pages/apps/components/installed-apps/installed-apps.component.spec.ts
+++ b/src/app/pages/apps/components/installed-apps/installed-apps.component.spec.ts
@@ -37,6 +37,7 @@ import {
 } from 'app/pages/apps/components/available-apps/custom-app-button/custom-app-button.component';
 import { ChartWizardComponent } from 'app/pages/apps/components/chart-wizard/chart-wizard.component';
 import { AppsFilterStore } from 'app/pages/apps/store/apps-filter-store.service';
+import { AppsStatisticsService } from 'app/pages/apps/store/apps-statistics.service';
 import { AppsStore } from 'app/pages/apps/store/apps-store.service';
 import { InstalledAppsStore } from 'app/pages/apps/store/installed-apps-store.service';
 import { KubernetesStore } from 'app/pages/apps/store/kubernetes-store.service';
@@ -250,6 +251,7 @@ describe('Finding app', () => {
     providers: [
       KubernetesStore,
       InstalledAppsStore,
+      mockProvider(AppsStatisticsService),
       mockWebSocket([]),
       mockProvider(AppsStore, {
         isLoading$: of(false),
@@ -311,6 +313,7 @@ describe('Redirect to install app', () => {
     providers: [
       KubernetesStore,
       InstalledAppsStore,
+      mockProvider(AppsStatisticsService),
       mockWebSocket([
         mockJob('chart.release.create'),
         mockJob('chart.release.update'),
diff --git a/src/app/pages/apps/components/installed-apps/installed-apps.component.ts b/src/app/pages/apps/components/installed-apps/installed-apps.component.ts
index 60b342dc452..b24b54ef8a3 100644
--- a/src/app/pages/apps/components/installed-apps/installed-apps.component.ts
+++ b/src/app/pages/apps/components/installed-apps/installed-apps.component.ts
@@ -17,8 +17,7 @@ import { UntilDestroy, untilDestroyed } from '@ngneat/until-destroy';
 import { Store } from '@ngrx/store';
 import { TranslateService } from '@ngx-translate/core';
 import {
-  Observable,
-  combineLatest, filter,
+  combineLatest, filter, Observable,
 } from 'rxjs';
 import { ChartReleaseStatus } from 'app/enums/chart-release-status.enum';
 import { EmptyType } from 'app/enums/empty-type.enum';
@@ -27,7 +26,7 @@ import { Role } from 'app/enums/role.enum';
 import { WINDOW } from 'app/helpers/window.helper';
 import { helptextApps } from 'app/helptext/apps/apps';
 import { ChartScaleResult, ChartScaleQueryParams } from 'app/interfaces/chart-release-event.interface';
-import { ChartRelease } from 'app/interfaces/chart-release.interface';
+import { ChartRelease, ChartReleaseStats } from 'app/interfaces/chart-release.interface';
 import { CoreBulkResponse } from 'app/interfaces/core-bulk.interface';
 import { EmptyConfig } from 'app/interfaces/empty-config.interface';
 import { Job } from 'app/interfaces/job.interface';
@@ -40,6 +39,7 @@ import { installedAppsElements } from 'app/pages/apps/components/installed-apps/
 import { KubernetesSettingsComponent } from 'app/pages/apps/components/installed-apps/kubernetes-settings/kubernetes-settings.component';
 import { AppStatus } from 'app/pages/apps/enum/app-status.enum';
 import { ApplicationsService } from 'app/pages/apps/services/applications.service';
+import { AppsStatisticsService } from 'app/pages/apps/store/apps-statistics.service';
 import { InstalledAppsStore } from 'app/pages/apps/store/installed-apps-store.service';
 import { KubernetesStore } from 'app/pages/apps/store/kubernetes-store.service';
 import { ErrorHandlerService } from 'app/services/error-handler.service';
@@ -159,6 +159,7 @@ export class InstalledAppsComponent implements OnInit, AfterViewInit {
     private slideInService: IxSlideInService,
     private breakpointObserver: BreakpointObserver,
     private errorHandler: ErrorHandlerService,
+    private appsStats: AppsStatisticsService,
     private store$: Store<AppState>,
     @Inject(WINDOW) private window: Window,
   ) {
@@ -456,6 +457,11 @@ export class InstalledAppsComponent implements OnInit, AfterViewInit {
     return status;
   }
 
+  // TODO: Rework this and getAppStatus above to be computed when dataSource is populated.
+  getAppStats(name: string): Observable<ChartReleaseStats> {
+    return this.appsStats.getStatsForApp(name);
+  }
+
   sortChanged(sort: Sort, charts?: ChartRelease[]): void {
     this.sortingInfo = sort;
 
diff --git a/src/app/pages/apps/services/applications.service.ts b/src/app/pages/apps/services/applications.service.ts
index 23321c389b5..2fefa2e8792 100644
--- a/src/app/pages/apps/services/applications.service.ts
+++ b/src/app/pages/apps/services/applications.service.ts
@@ -110,10 +110,6 @@ export class ApplicationsService {
     return this.ws.subscribe('chart.release.query');
   }
 
-  getInstalledAppsStatisticsUpdates(): Observable<ApiEvent> {
-    return this.ws.subscribe('chart.release.statistics');
-  }
-
   getInstalledAppsStatusUpdates(): Observable<ApiEvent<Job<ChartScaleResult, ChartScaleQueryParams>>> {
     return this.ws.subscribe('core.get_jobs').pipe(
       filter((event: ApiEvent<Job<ChartScaleResult, ChartScaleQueryParams>>) => {
diff --git a/src/app/pages/apps/store/apps-statistics.service.spec.ts b/src/app/pages/apps/store/apps-statistics.service.spec.ts
new file mode 100644
index 00000000000..8adbcc7c99f
--- /dev/null
+++ b/src/app/pages/apps/store/apps-statistics.service.spec.ts
@@ -0,0 +1,52 @@
+import {
+  createServiceFactory,
+  mockProvider,
+  SpectatorService,
+} from '@ngneat/spectator/jest';
+import { of } from 'rxjs';
+import { ApiEvent } from 'app/interfaces/api-message.interface';
+import { ChartReleaseStats, ChartStatisticsUpdate } from 'app/interfaces/chart-release.interface';
+import { AppsStatisticsService } from 'app/pages/apps/store/apps-statistics.service';
+import { WebSocketService } from 'app/services/ws.service';
+
+describe('AppsStatisticsService', () => {
+  const plexStats = {};
+  const minioStats = {};
+
+  let spectator: SpectatorService<AppsStatisticsService>;
+  const createService = createServiceFactory({
+    service: AppsStatisticsService,
+    providers: [
+      mockProvider(WebSocketService, {
+        subscribe: jest.fn(() => of({
+          fields: [
+            { id: 'plex', stats: plexStats },
+            { id: 'minio', stats: minioStats },
+          ],
+        } as ApiEvent<ChartStatisticsUpdate[]>)),
+      }),
+    ],
+  });
+
+  beforeEach(() => {
+    spectator = createService();
+  });
+  describe('subscribeToUpdates()', () => {
+    it('subscribes to chart statistics updates when subscribeToUpdates() is called', () => {
+      spectator.service.subscribeToUpdates();
+      expect(spectator.inject(WebSocketService).subscribe).toHaveBeenCalledWith('chart.release.statistics');
+    });
+  });
+
+  describe('getStatsForApp()', () => {
+    it('returns an observable with statistics for an app', () => {
+      spectator.service.subscribeToUpdates();
+      const plexStats$ = spectator.service.getStatsForApp('plex');
+
+      let plexStatsUpdate: ChartReleaseStats;
+      plexStats$.subscribe((stats) => plexStatsUpdate = stats);
+
+      expect(plexStatsUpdate).toBe(plexStats);
+    });
+  });
+});
diff --git a/src/app/pages/apps/store/apps-statistics.service.ts b/src/app/pages/apps/store/apps-statistics.service.ts
new file mode 100644
index 00000000000..4a02beb71a6
--- /dev/null
+++ b/src/app/pages/apps/store/apps-statistics.service.ts
@@ -0,0 +1,38 @@
+import { Injectable } from '@angular/core';
+import { UntilDestroy, untilDestroyed } from '@ngneat/until-destroy';
+import { ComponentStore } from '@ngrx/component-store';
+import { Observable } from 'rxjs';
+import { map } from 'rxjs/operators';
+import { ChartReleaseStats } from 'app/interfaces/chart-release.interface';
+import { WebSocketService } from 'app/services/ws.service';
+
+type State = Record<string, ChartReleaseStats>;
+
+@UntilDestroy()
+@Injectable()
+export class AppsStatisticsService extends ComponentStore<State> {
+  constructor(
+    private ws: WebSocketService,
+  ) {
+    super({});
+  }
+
+  getStatsForApp(appName: string): Observable<ChartReleaseStats> {
+    return this.state$.pipe(map((stats) => stats[appName]));
+  }
+
+  subscribeToUpdates(): void {
+    this.ws.subscribe('chart.release.statistics')
+      .pipe(untilDestroyed(this))
+      .subscribe((event) => this.onStatisticsReceived(event.fields));
+  }
+
+  private onStatisticsReceived(update: { id: string; stats: ChartReleaseStats }[]): void {
+    const statsByApp = update.reduce((acc, { id, stats }) => {
+      acc[id] = stats;
+      return acc;
+    }, {} as Record<string, ChartReleaseStats>);
+
+    this.setState(statsByApp);
+  }
+}
diff --git a/src/app/pages/apps/store/apps-store.service.ts b/src/app/pages/apps/store/apps-store.service.ts
index 389804a5ac7..2663ef69444 100644
--- a/src/app/pages/apps/store/apps-store.service.ts
+++ b/src/app/pages/apps/store/apps-store.service.ts
@@ -7,7 +7,6 @@ import {
 } from 'rxjs';
 import { AppExtraCategory } from 'app/enums/app-extra-category.enum';
 import { AvailableApp } from 'app/interfaces/available-app.interface';
-import { DialogService } from 'app/modules/dialog/dialog.service';
 import { ApplicationsService } from 'app/pages/apps/services/applications.service';
 import { ErrorHandlerService } from 'app/services/error-handler.service';
 
@@ -52,7 +51,6 @@ export class AppsStore extends ComponentStore<AppsState> {
   readonly availableApps$ = this.select((state) => state.availableApps);
 
   constructor(
-    private dialogService: DialogService,
     private errorHandler: ErrorHandlerService,
     private appsService: ApplicationsService,
   ) {
diff --git a/src/app/pages/apps/store/installed-apps-store.service.spec.ts b/src/app/pages/apps/store/installed-apps-store.service.spec.ts
index 0fb2a2431d4..991ebad132c 100644
--- a/src/app/pages/apps/store/installed-apps-store.service.spec.ts
+++ b/src/app/pages/apps/store/installed-apps-store.service.spec.ts
@@ -7,6 +7,7 @@ import { ChartScaleQueryParams, ChartScaleResult } from 'app/interfaces/chart-re
 import { ChartRelease } from 'app/interfaces/chart-release.interface';
 import { Job } from 'app/interfaces/job.interface';
 import { ApplicationsService } from 'app/pages/apps/services/applications.service';
+import { AppsStatisticsService } from 'app/pages/apps/store/apps-statistics.service';
 import { AppsStore } from 'app/pages/apps/store/apps-store.service';
 import { InstalledAppsStore } from 'app/pages/apps/store/installed-apps-store.service';
 import { KubernetesStore } from 'app/pages/apps/store/kubernetes-store.service';
@@ -42,6 +43,7 @@ describe('InstalledAppsStore', () => {
         isLoading$: of(false),
         isKubernetesStarted$: of(true),
       }),
+      mockProvider(AppsStatisticsService),
     ],
   });
 
diff --git a/src/app/pages/apps/store/installed-apps-store.service.ts b/src/app/pages/apps/store/installed-apps-store.service.ts
index 0e950e2907b..7be09cfc4cb 100644
--- a/src/app/pages/apps/store/installed-apps-store.service.ts
+++ b/src/app/pages/apps/store/installed-apps-store.service.ts
@@ -1,7 +1,6 @@
 import { Injectable, OnDestroy } from '@angular/core';
 import { UntilDestroy, untilDestroyed } from '@ngneat/until-destroy';
 import { ComponentStore } from '@ngrx/component-store';
-import { isEqual } from 'lodash';
 import {
   EMPTY,
   Observable, Subscription, catchError, combineLatest, filter, of, switchMap, tap,
@@ -9,8 +8,9 @@ import {
 import { IncomingApiMessageType } from 'app/enums/api-message-type.enum';
 import { ApiEvent } from 'app/interfaces/api-message.interface';
 import { AvailableApp } from 'app/interfaces/available-app.interface';
-import { ChartRelease, ChartReleaseStats } from 'app/interfaces/chart-release.interface';
+import { ChartRelease } from 'app/interfaces/chart-release.interface';
 import { ApplicationsService } from 'app/pages/apps/services/applications.service';
+import { AppsStatisticsService } from 'app/pages/apps/store/apps-statistics.service';
 import { AppsStore } from 'app/pages/apps/store/apps-store.service';
 import { KubernetesStore } from 'app/pages/apps/store/kubernetes-store.service';
 import { ErrorHandlerService } from 'app/services/error-handler.service';
@@ -31,13 +31,13 @@ export class InstalledAppsStore extends ComponentStore<InstalledAppsState> imple
   readonly installedApps$ = this.select((state) => state.installedApps);
   readonly isLoading$ = this.select((state) => state.isLoading);
   private installedAppsSubscription: Subscription;
-  private installedAppsStatisticsSubscription: Subscription;
 
   constructor(
     private appsService: ApplicationsService,
     private appsStore: AppsStore,
     private kubernetesStore: KubernetesStore,
     private errorHandler: ErrorHandlerService,
+    private appsStats: AppsStatisticsService,
   ) {
     super(initialState);
     this.initialize();
@@ -161,36 +161,6 @@ export class InstalledAppsStore extends ComponentStore<InstalledAppsState> imple
     ).subscribe();
   }
 
-  private subscribeToInstalledAppsStatisticsUpdates(): void {
-    if (this.installedAppsStatisticsSubscription) {
-      return;
-    }
-
-    this.installedAppsStatisticsSubscription = this.appsService.getInstalledAppsStatisticsUpdates().pipe(
-      tap((apiEvent: ApiEvent<{ id: string; stats: ChartReleaseStats }[]>) => {
-        if (apiEvent.msg === IncomingApiMessageType.Added) {
-          this.patchState((state) => {
-            return {
-              ...state,
-              installedApps: state.installedApps.map((app) => {
-                const appWithUpdatedStats = apiEvent.fields.find((item) => item.id === app.id);
-                if (appWithUpdatedStats && isEqual(appWithUpdatedStats.stats, app.stats)) {
-                  return app;
-                }
-
-                return {
-                  ...app,
-                  stats: appWithUpdatedStats?.stats || app.stats,
-                };
-              }),
-            };
-          });
-        }
-      }),
-      untilDestroyed(this),
-    ).subscribe();
-  }
-
   private loadInstalledApps(): Observable<unknown> {
     return this.kubernetesStore.isLoading$.pipe(
       filter((loading) => !loading),
@@ -207,7 +177,7 @@ export class InstalledAppsStore extends ComponentStore<InstalledAppsState> imple
             });
             if (isKubernetesStarted) {
               this.subscribeToInstalledAppsUpdates();
-              this.subscribeToInstalledAppsStatisticsUpdates();
+              this.appsStats.subscribeToUpdates();
             }
           }),
         ) : of([]);
diff --git a/src/app/pages/dashboard/dashboard.module.ts b/src/app/pages/dashboard/dashboard.module.ts
index 22e9d121db9..c3d31bfde57 100644
--- a/src/app/pages/dashboard/dashboard.module.ts
+++ b/src/app/pages/dashboard/dashboard.module.ts
@@ -5,11 +5,13 @@ import { NgModule } from '@angular/core';
 import { ReactiveFormsModule } from '@angular/forms';
 import { MatButton, MatButtonModule } from '@angular/material/button';
 import { MatCard, MatCardContent } from '@angular/material/card';
+import { MatListModule } from '@angular/material/list';
 import { MatTooltipModule } from '@angular/material/tooltip';
 import { TranslateModule } from '@ngx-translate/core';
 import { BaseChartDirective } from 'ng2-charts';
 import { NgxSkeletonLoaderModule } from 'ngx-skeleton-loader';
 import { CommonDirectivesModule } from 'app/directives/common/common-directives.module';
+import { ChartsModule } from 'app/modules/charts/charts.module';
 import { EmptyComponent } from 'app/modules/empty/empty.component';
 import { IxDropGridModule } from 'app/modules/ix-drop-grid/ix-drop-grid.module';
 import { IxFormsModule } from 'app/modules/ix-forms/ix-forms.module';
@@ -81,6 +83,8 @@ import { WidgetDatapointComponent } from 'app/pages/dashboard/widgets/common/wid
       },
     }),
     IxDropGridModule,
+    ChartsModule,
+    MatListModule,
     EmptyComponent,
   ],
 })
diff --git a/src/app/pages/dashboard/services/dashboard.store.spec.ts b/src/app/pages/dashboard/services/dashboard.store.spec.ts
index bda8caf5bd7..0c78b73262e 100644
--- a/src/app/pages/dashboard/services/dashboard.store.spec.ts
+++ b/src/app/pages/dashboard/services/dashboard.store.spec.ts
@@ -1,6 +1,7 @@
 import { createServiceFactory, SpectatorService, mockProvider } from '@ngneat/spectator/jest';
 import { firstValueFrom, of } from 'rxjs';
 import { mockCall, mockWebSocket } from 'app/core/testing/utils/mock-websocket.utils';
+import { demoWidgets } from 'app/pages/dashboard/services/demo-widgets.constant';
 import { WidgetGroupLayout } from 'app/pages/dashboard/types/widget-group.interface';
 import { WidgetType } from 'app/pages/dashboard/types/widget.interface';
 import { AuthService } from 'app/services/auth/auth.service';
@@ -95,6 +96,18 @@ describe('DashboardStore', () => {
     expect(finalizeSpy).toHaveBeenCalledWith(false);
   });
 
+  it('should load demoWidgets if user does not have dashState', async () => {
+    const authService = spectator.inject(AuthService);
+    Object.defineProperty(authService, 'user$', { value: of({ attributes: {} }) });
+
+    spectator.service.entered();
+
+    expect(await firstValueFrom(spectator.service.state$)).toMatchObject({
+      ...initialState,
+      groups: demoWidgets,
+    });
+  });
+
   afterEach(() => {
     jest.clearAllMocks();
   });
diff --git a/src/app/pages/dashboard/services/dashboard.store.ts b/src/app/pages/dashboard/services/dashboard.store.ts
index 2691e2d083d..ddeec844939 100644
--- a/src/app/pages/dashboard/services/dashboard.store.ts
+++ b/src/app/pages/dashboard/services/dashboard.store.ts
@@ -7,6 +7,7 @@ import {
 } from 'rxjs';
 import { WidgetName } from 'app/enums/widget-name.enum';
 import { LoggedInUser } from 'app/interfaces/ds-cache.interface';
+import { demoWidgets } from 'app/pages/dashboard/services/demo-widgets.constant';
 import { WidgetGroup, WidgetGroupLayout } from 'app/pages/dashboard/types/widget-group.interface';
 import { SomeWidgetSettings, WidgetType } from 'app/pages/dashboard/types/widget.interface';
 import { AuthService } from 'app/services/auth/auth.service';
@@ -62,10 +63,11 @@ export class DashboardStore extends ComponentStore<DashboardState> {
         map((user) => user.attributes.dashState),
       )),
       tap((dashState) => {
+        // TODO: Remove demoWidgets once active development of new dashboard is done
         this.setState({
           isLoading: false,
           globalError: '',
-          groups: this.getDashboardGroups(dashState || []),
+          groups: this.getDashboardGroups(dashState || demoWidgets),
         });
       }),
       catchError((error) => {
@@ -121,7 +123,7 @@ export class DashboardStore extends ComponentStore<DashboardState> {
       case WidgetName.Backup: return unknownWidgetType;
       case WidgetName.Network: return unknownWidgetType;
       case WidgetName.SystemInformation: return unknownWidgetType;
-      case WidgetName.Cpu: return unknownWidgetType;
+      case WidgetName.Cpu: return WidgetType.Cpu;
       case WidgetName.Storage: return unknownWidgetType;
       case WidgetName.Pool: return unknownWidgetType;
       default: return unknownWidgetType;
diff --git a/src/app/pages/dashboard/services/demo-widgets.constant.ts b/src/app/pages/dashboard/services/demo-widgets.constant.ts
index aeb0f8b6224..ffaeee0a564 100644
--- a/src/app/pages/dashboard/services/demo-widgets.constant.ts
+++ b/src/app/pages/dashboard/services/demo-widgets.constant.ts
@@ -14,6 +14,12 @@ export const demoWidgets: WidgetGroup[] = [
       { type: WidgetType.Memory },
     ],
   },
+  {
+    layout: WidgetGroupLayout.Full,
+    slots: [
+      { type: WidgetType.Cpu },
+    ],
+  },
   {
     layout: WidgetGroupLayout.QuartersAndHalf,
     slots: [
diff --git a/src/app/pages/dashboard/types/widget-category.enum.ts b/src/app/pages/dashboard/types/widget-category.enum.ts
index 5db2d33f7a6..2b4375a3bd7 100644
--- a/src/app/pages/dashboard/types/widget-category.enum.ts
+++ b/src/app/pages/dashboard/types/widget-category.enum.ts
@@ -12,6 +12,6 @@ export const widgetCategoryLabels = new Map<WidgetCategory, string>([
   [WidgetCategory.Network, T('Network')],
   [WidgetCategory.Help, T('Help')],
   [WidgetCategory.Cpu, T('CPU')],
-  [WidgetCategory.Cpu, T('Memory')],
+  [WidgetCategory.Memory, T('Memory')],
   [WidgetCategory.Storage, T('Storage')],
 ]);
diff --git a/src/app/pages/dashboard/types/widget.interface.ts b/src/app/pages/dashboard/types/widget.interface.ts
index 47da7eceaa7..323aee1efc7 100644
--- a/src/app/pages/dashboard/types/widget.interface.ts
+++ b/src/app/pages/dashboard/types/widget.interface.ts
@@ -10,6 +10,7 @@ export enum WidgetType {
   InterfaceIp = 'interface-ip',
   Help = 'help',
   Memory = 'memory',
+  Cpu = 'cpu',
 }
 
 export enum SlotSize {
diff --git a/src/app/pages/dashboard/widgets/all-widgets.constant.ts b/src/app/pages/dashboard/widgets/all-widgets.constant.ts
index 804d8b78720..d905ed43872 100644
--- a/src/app/pages/dashboard/widgets/all-widgets.constant.ts
+++ b/src/app/pages/dashboard/widgets/all-widgets.constant.ts
@@ -1,4 +1,5 @@
 import { WidgetType } from 'app/pages/dashboard/types/widget.interface';
+import { cpuWidget } from 'app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.definition';
 import { helpWidget } from 'app/pages/dashboard/widgets/help/widget-help/widget-help.definition';
 import { memoryWidget } from 'app/pages/dashboard/widgets/memory/widget-memory/widget-memory.definition';
 import { hostnameWidget } from 'app/pages/dashboard/widgets/network/widget-hostname/widget-hostname.definition';
@@ -12,6 +13,7 @@ export const widgetComponents = [
   interfaceIpWidget.settingsComponent,
   helpWidget.component,
   memoryWidget.component,
+  cpuWidget.component,
 ];
 
 export const widgetRegistry = {
@@ -19,4 +21,5 @@ export const widgetRegistry = {
   [WidgetType.InterfaceIp]: interfaceIpWidget,
   [WidgetType.Help]: helpWidget,
   [WidgetType.Memory]: memoryWidget,
+  [WidgetType.Cpu]: cpuWidget,
 };
diff --git a/src/app/pages/dashboard/widgets/cpu/interfaces/cpu-params.interface.ts b/src/app/pages/dashboard/widgets/cpu/interfaces/cpu-params.interface.ts
new file mode 100644
index 00000000000..072f0e3647d
--- /dev/null
+++ b/src/app/pages/dashboard/widgets/cpu/interfaces/cpu-params.interface.ts
@@ -0,0 +1,10 @@
+export interface CpuParams {
+  usageMin: number;
+  usageMax: number;
+  usageMinThreads: number[];
+  usageMaxThreads: number[];
+  tempMin: number;
+  tempMax: number;
+  tempMinThreads: number[];
+  tempMaxThreads: number[];
+}
diff --git a/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.html b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.html
new file mode 100644
index 00000000000..06953f80863
--- /dev/null
+++ b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.html
@@ -0,0 +1,83 @@
+<mat-card class="card">
+  <mat-card-content class="card-content">
+    <div class="header">
+      <h3>{{ 'CPU' | translate }}</h3>
+
+      <button
+        mat-icon-button
+        ixTest="cpu-go-to-reports"
+        matTooltipPosition="above"
+        [attr.aria-label]="'CPU Reports' | translate"
+        [matTooltip]="'CPU Reports' | translate"
+        [routerLink]="['/reportsdashboard', 'cpu']"
+      >
+        <ix-icon name="insert_chart"></ix-icon>
+      </button>
+    </div>
+
+    <div [class]="['container', size()]">
+      <div class="content">
+        <div class="cpu-model">
+          <span>{{ cpuModel() ? cpuModel() : ('Unknown CPU' | translate) }}</span>
+        </div>
+        <div class="cpu-load-wrapper">
+          <div class="chart-gauge">
+            <ngx-skeleton-loader
+              *ngIf="isLoading(); else gauge"
+              class="skeleton"
+              appearance="circle"
+              [theme]="{ width: '100%', height: '130px', 'aspect-ratio': '1', background: 'var(--alt-bg2)', opacity: 0.25 }"
+            ></ngx-skeleton-loader>
+            <ng-template #gauge>
+              <ix-view-chart-gauge [config]="cpuAvg()"></ix-view-chart-gauge>
+            </ng-template>
+          </div>
+          <mat-list class="cpu-data">
+            <mat-list-item>
+              <span class="label">
+                <strong>{{ 'Cores' | translate }}:</strong>
+              </span>
+              <ng-container *ngIf="!isLoading(); else skeleton">
+                {{ '{coreCount, plural, one {# core} other {# cores} }' | translate: { coreCount: coreCount() } }}
+              </ng-container>
+            </mat-list-item>
+            <mat-list-item>
+              <span class="label">
+                <strong>{{ 'Highest Usage' | translate }}:</strong>
+              </span>
+              <ng-container *ngIf="!isLoading(); else skeleton">
+                {{ highest() }}
+              </ng-container>
+            </mat-list-item>
+            <mat-list-item>
+              <span class="label">
+                <strong>{{ 'Hottest' | translate }}:</strong>
+              </span>
+              <ng-container *ngIf="!isLoading(); else skeleton">
+                {{ hottest() }}
+              </ng-container>
+            </mat-list-item>
+            <ng-template #skeleton>
+              <ngx-skeleton-loader class="skeleton"></ngx-skeleton-loader>
+            </ng-template>
+          </mat-list>
+        </div>
+        <div class="chart">
+          <ngx-skeleton-loader
+            *ngIf="isLoading(); else chart"
+            class="skeleton"
+            [theme]="{ width: '100%', height: '100px', background: 'var(--alt-bg2)', opacity: 0.25 }"
+          ></ngx-skeleton-loader>
+          <ng-template #chart>
+            <canvas
+              baseChart
+              type="bar"
+              [data]="chartData()"
+              [options]="chartOptions()"
+            ></canvas>
+          </ng-template>
+        </div>
+      </div>
+    </div>
+  </mat-card-content>
+</mat-card>
diff --git a/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.scss b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.scss
new file mode 100644
index 00000000000..32edb415275
--- /dev/null
+++ b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.scss
@@ -0,0 +1,83 @@
+@import 'scss-imports/cssvars';
+
+.card {
+  box-sizing: border-box;
+  display: flex;
+  flex-direction: column;
+  height: 100%;
+}
+
+.card-content {
+  display: flex;
+  flex-direction: column;
+  height: 100%;
+  padding-bottom: 0;
+  padding-right: 10px;
+
+  .header {
+    padding-bottom: 0;
+    padding-right: 12px;
+  }
+
+  .container {
+    padding-left: 12px;
+    padding-right: 0;
+    padding-top: 0;
+  }
+}
+
+.header {
+  display: flex;
+  justify-content: space-between;
+
+  h3 {
+    font-size: 24px;
+  }
+}
+
+.container {
+  display: flex;
+  flex-grow: 1;
+  overflow: hidden;
+  
+  .content {
+    width: 100%;
+
+    .cpu-model {
+      opacity: 0.5;
+      padding-bottom: 24px;
+      text-align: center;
+    }
+
+    .cpu-load-wrapper {
+      display: flex;
+    }
+
+    .chart-gauge {
+      align-items: center;
+      display: flex;
+      flex: 0 0 45%;
+      justify-content: center;
+    }
+
+    .cpu-data {
+      flex: 0 0 55%;
+
+      .mat-mdc-list-item {
+        border-bottom: none !important;
+      }
+
+      .skeleton {
+        display: block;
+        width: 100px;
+      }
+    }
+  }
+
+  .chart {
+    height: 100px;
+    margin-top: 30px;
+    padding-left: 24px;
+    padding-right: 24px;
+  }
+}
diff --git a/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.spec.ts b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.spec.ts
new file mode 100644
index 00000000000..0dde6eec05e
--- /dev/null
+++ b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.spec.ts
@@ -0,0 +1,110 @@
+import { createComponentFactory, mockProvider, Spectator } from '@ngneat/spectator/jest';
+import { provideMockStore } from '@ngrx/store/testing';
+import { ChartData } from 'chart.js';
+import { MockComponent, MockDirective } from 'ng-mocks';
+import { BaseChartDirective } from 'ng2-charts';
+import { NgxSkeletonLoaderModule } from 'ngx-skeleton-loader';
+import { of } from 'rxjs';
+import { ViewChartGaugeComponent } from 'app/modules/charts/components/view-chart-gauge/view-chart-gauge.component';
+import { WidgetResourcesService } from 'app/pages/dashboard/services/widget-resources.service';
+import { SlotSize } from 'app/pages/dashboard/types/widget.interface';
+import { WidgetCpuComponent } from 'app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component';
+import { ThemeService } from 'app/services/theme/theme.service';
+import { selectSystemInfo } from 'app/store/system-info/system-info.selectors';
+
+describe('WidgetCpuComponent', () => {
+  let spectator: Spectator<WidgetCpuComponent>;
+  const createComponent = createComponentFactory({
+    component: WidgetCpuComponent,
+    imports: [
+      NgxSkeletonLoaderModule,
+    ],
+    declarations: [
+      MockDirective(BaseChartDirective),
+      MockComponent(ViewChartGaugeComponent),
+    ],
+    providers: [
+      mockProvider(
+        WidgetResourcesService,
+        {
+          realtimeUpdates$: of({
+            fields: {
+              cpu: {
+                0: { usage: 6 },
+                1: { usage: 30 },
+                2: { usage: 70 },
+                3: { usage: 9 },
+                average: { usage: 75 },
+                temperature_celsius: [31, 83],
+              },
+            },
+          }),
+        },
+      ),
+      mockProvider(ThemeService, {
+        getRgbBackgroundColorByIndex: () => [0, 0, 0],
+      }),
+      provideMockStore({
+        selectors: [
+          {
+            selector: selectSystemInfo,
+            value: {
+              model: 'Intel(R) Xeon(R) Silver 4210R CPU',
+              cores: 4,
+              physical_cores: 2,
+            },
+          },
+        ],
+      }),
+    ],
+  });
+
+  beforeEach(() => {
+    spectator = createComponent({
+      props: {
+        size: SlotSize.Full,
+      },
+    });
+  });
+
+  it('shows cpu model', () => {
+    expect(spectator.query('.cpu-model')).toHaveText('Intel(R) Xeon(R) Silver 4210R CPU');
+  });
+
+  it('shows cpu stats for the system', () => {
+    const stats = spectator.queryAll('.cpu-data mat-list-item');
+    expect(stats).toHaveLength(3);
+    expect(stats[0]).toHaveText('Cores: 2 cores');
+    expect(stats[1]).toHaveText('Highest Usage: 70% (Thread #2)');
+    expect(stats[2]).toHaveText('Hottest: 83°C (2 cores at 83°C)');
+  });
+
+  it('shows a chart with cpu stats', () => {
+    const chart = spectator.query(BaseChartDirective);
+    expect(chart).not.toBeNull();
+    expect(chart.type).toBe('bar');
+
+    const data = chart.data as ChartData<'bar'>;
+    expect(data).toMatchObject({
+      labels: ['1', '2', '3', '4'],
+      datasets: [
+        { data: [6, 30, 70, 9] },
+        { data: [31, 31, 83, 83] },
+      ],
+    });
+  });
+
+  it('shows a chart with cpu average usage', () => {
+    const chart = spectator.query(ViewChartGaugeComponent);
+    expect(chart).not.toBeNull();
+    expect(chart.config).toEqual({
+      data: ['Load', 75],
+      diameter: 136,
+      fontSize: 28,
+      label: false,
+      max: 100,
+      subtitle: 'Avg Usage',
+      units: '%',
+    });
+  });
+});
diff --git a/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.ts b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.ts
new file mode 100644
index 00000000000..137ae67a2b3
--- /dev/null
+++ b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component.ts
@@ -0,0 +1,241 @@
+import {
+  ChangeDetectionStrategy, Component, Signal, computed, input,
+} from '@angular/core';
+import { toSignal } from '@angular/core/rxjs-interop';
+import { TinyColor } from '@ctrl/tinycolor';
+import { Store } from '@ngrx/store';
+import { TranslateService } from '@ngx-translate/core';
+import { ChartData, ChartOptions } from 'chart.js';
+import { map } from 'rxjs/operators';
+import { AllCpusUpdate } from 'app/interfaces/reporting.interface';
+import { GaugeConfig, GaugeData } from 'app/modules/charts/components/view-chart-gauge/view-chart-gauge.component';
+import { WidgetResourcesService } from 'app/pages/dashboard/services/widget-resources.service';
+import { SlotSize } from 'app/pages/dashboard/types/widget.interface';
+import { CpuParams } from 'app/pages/dashboard/widgets/cpu/interfaces/cpu-params.interface';
+import { ThemeService } from 'app/services/theme/theme.service';
+import { AppState } from 'app/store';
+import { waitForSystemInfo } from 'app/store/system-info/system-info.selectors';
+
+@Component({
+  selector: 'ix-widget-cpu',
+  templateUrl: './widget-cpu.component.html',
+  styleUrl: './widget-cpu.component.scss',
+  changeDetection: ChangeDetectionStrategy.OnPush,
+})
+export class WidgetCpuComponent {
+  size = input.required<SlotSize>();
+
+  protected sysInfo = toSignal(this.store$.pipe(waitForSystemInfo));
+
+  protected cpuData = toSignal(this.resources.realtimeUpdates$.pipe(
+    map((update) => update.fields.cpu),
+  ));
+
+  protected isLoading = computed(() => !this.cpuData() || !this.sysInfo());
+  protected cpuModel = computed(() => this.sysInfo().model);
+  protected coreCount = computed(() => this.sysInfo().physical_cores);
+  protected threadCount = computed(() => this.sysInfo().cores);
+  protected hyperthread = computed(() => this.sysInfo().cores !== this.sysInfo().physical_cores);
+
+  protected cpuAvg: Signal<GaugeConfig> = computed(() => {
+    const data = ['Load', parseInt(this.cpuData().average.usage.toFixed(1))];
+    return {
+      label: false,
+      data,
+      units: '%',
+      diameter: 136,
+      fontSize: 28,
+      max: 100,
+      subtitle: this.translate.instant('Avg Usage'),
+    };
+  });
+
+  protected highest = computed(() => {
+    const cpuParams = this.getCpuParams();
+    if (cpuParams.usageMax) {
+      if (cpuParams.usageMaxThreads.length === 0) {
+        return this.translate.instant('{usage}% (All Threads)', { usage: cpuParams.usageMax });
+      }
+      if (cpuParams.usageMaxThreads.length === 1) {
+        return this.translate.instant('{usage}% (Thread #{thread})', {
+          usage: cpuParams.usageMax,
+          thread: cpuParams.usageMaxThreads.toString(),
+        });
+      }
+      return this.translate.instant('{usage}% ({threadCount} threads at {usage}%)', {
+        usage: cpuParams.usageMax,
+        threadCount: cpuParams.usageMaxThreads.length,
+      });
+    }
+    return this.translate.instant('N/A');
+  });
+
+  protected hottest = computed(() => {
+    const cpuParams = this.getCpuParams();
+    if (cpuParams.tempMax) {
+      if (cpuParams.tempMaxThreads.length === 0) {
+        return this.translate.instant('{temp}°C (All Threads)', { temp: cpuParams.tempMax });
+      }
+      if (cpuParams.tempMaxThreads.length === 1) {
+        return this.translate.instant('{temp}°C (Core #{core})', {
+          temp: cpuParams.tempMax,
+          thread: cpuParams.tempMaxThreads.toString(),
+        });
+      }
+      return this.translate.instant('{temp}°C ({coreCount} cores at {temp}°C)', {
+        temp: cpuParams.tempMax,
+        coreCount: cpuParams.tempMaxThreads.length,
+      });
+    }
+    return this.translate.instant('N/A');
+  });
+
+  stats = computed(() => {
+    const data = this.parseCpuData(this.cpuData());
+
+    return {
+      labels: Array.from({ length: this.threadCount() }, (_, i) => (i + 1).toString()),
+      values: data.map((item, index) => ({
+        data: item.slice(1) as number[],
+        color: this.theme.getRgbBackgroundColorByIndex(index),
+      })),
+    };
+  });
+
+  chartData = computed<ChartData<'bar'>>(() => {
+    const labels = this.stats().labels;
+    const values = this.stats().values;
+
+    return {
+      labels,
+      datasets: values.map((value) => ({
+        data: value.data,
+        borderWidth: 1,
+        maxBarThickness: 16,
+
+        backgroundColor: new TinyColor(value.color).setAlpha(0.85).toHex8String(),
+        borderColor: value.color,
+      })),
+    };
+  });
+
+  chartOptions = computed<ChartOptions<'bar'>>(() => {
+    const labels = this.stats().labels;
+
+    return {
+      interaction: {
+        intersect: false,
+      },
+      responsive: true,
+      maintainAspectRatio: false,
+      plugins: {
+        legend: {
+          display: false,
+        },
+        tooltip: {
+          enabled: false,
+        },
+      },
+      animation: {
+        duration: 0,
+      },
+      transitions: {
+        active: {
+          animation: {
+            duration: 0,
+          },
+        },
+      },
+      scales: {
+        x: {
+          type: 'category',
+          labels,
+        },
+        y: {
+          type: 'linear',
+          max: 100,
+          beginAtZero: true,
+        },
+      },
+    };
+  });
+
+  constructor(
+    private store$: Store<AppState>,
+    private resources: WidgetResourcesService,
+    private theme: ThemeService,
+    private translate: TranslateService,
+  ) {}
+
+  protected parseCpuData(cpuData: AllCpusUpdate): GaugeData[] {
+    const usageColumn: GaugeData = ['Usage'];
+    let temperatureColumn: GaugeData = ['Temperature'];
+    const temperatureValues = [];
+
+    // Filter out stats per thread
+    const keys = Object.keys(cpuData);
+    const threads = keys.filter((cpuUpdateAttribute) => !Number.isNaN(parseFloat(cpuUpdateAttribute)));
+
+    for (let i = 0; i < this.threadCount(); i++) {
+      usageColumn.push(parseInt(cpuData[i].usage.toFixed(1)));
+
+      if (cpuData.temperature_celsius) {
+        const mod = threads.length % 2;
+        const temperatureIndex = this.hyperthread ? Math.floor(i / 2 - mod) : i;
+        if (cpuData.temperature_celsius?.[temperatureIndex]) {
+          temperatureValues.push(parseInt(cpuData.temperature_celsius[temperatureIndex].toFixed(0)));
+        }
+      }
+    }
+    temperatureColumn = temperatureColumn.concat(temperatureValues);
+
+    return [usageColumn, temperatureColumn];
+  }
+
+  protected getCpuParams(): CpuParams {
+    const data = this.parseCpuData(this.cpuData());
+    const usage = data[0].slice(1) as number[];
+    const temps = data[1].slice(1) as number[];
+
+    const usageMin = usage?.length ? Number(Math.min(...usage).toFixed(0)) : 0;
+    const usageMax = usage?.length ? Number(Math.max(...usage).toFixed(0)) : 0;
+
+    const usageMinThreads = [];
+    const usageMaxThreads = [];
+    for (let i = 0; i < usage.length; i++) {
+      if (usage[i] === usageMin) {
+        usageMinThreads.push(Number(i.toFixed(0)));
+      }
+
+      if (usage[i] === usageMax) {
+        usageMaxThreads.push(Number(i.toFixed(0)));
+      }
+    }
+
+    const tempMin = temps?.length ? Number(Math.min(...temps).toFixed(0)) : 0;
+    const tempMax = temps?.length ? Number(Math.max(...temps).toFixed(0)) : 0;
+
+    const tempMinThreads = [];
+    const tempMaxThreads = [];
+    for (let i = 0; i < temps.length; i++) {
+      if (temps[i] === tempMin) {
+        tempMinThreads.push(Number(i.toFixed(0)));
+      }
+
+      if (temps[i] === tempMax) {
+        tempMaxThreads.push(Number(i.toFixed(0)));
+      }
+    }
+
+    return {
+      tempMin,
+      tempMax,
+      tempMinThreads,
+      tempMaxThreads,
+      usageMin,
+      usageMax,
+      usageMinThreads,
+      usageMaxThreads,
+    };
+  }
+}
diff --git a/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.definition.ts b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.definition.ts
new file mode 100644
index 00000000000..cd7ef22a335
--- /dev/null
+++ b/src/app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.definition.ts
@@ -0,0 +1,13 @@
+import { marker as T } from '@biesbjerg/ngx-translate-extract-marker';
+import { WidgetCategory } from 'app/pages/dashboard/types/widget-category.enum';
+import { dashboardWidget } from 'app/pages/dashboard/types/widget-component.interface';
+import { SlotSize } from 'app/pages/dashboard/types/widget.interface';
+import { WidgetCpuComponent } from 'app/pages/dashboard/widgets/cpu/widget-cpu/widget-cpu.component';
+
+export const cpuWidget = dashboardWidget({
+  name: T('CPU'),
+  supportedSizes: [SlotSize.Full],
+  category: WidgetCategory.Cpu,
+  component: WidgetCpuComponent,
+  settingsComponent: null,
+});
diff --git a/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.html b/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.html
new file mode 100644
index 00000000000..cf541af96ce
--- /dev/null
+++ b/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.html
@@ -0,0 +1,50 @@
+<h1 mat-dialog-title>
+  {{ 'Netdata' | translate }}
+
+  <button
+    class="dialog-close"
+    mat-icon-button
+    mat-dialog-close="close"
+    ixTest="close"
+  >
+    <ix-icon name="close"></ix-icon>
+  </button>
+</h1>
+
+<div mat-dialog-content>
+  <p>
+    {{ "We've generated a Netdata password and attempted to automatically log you in in a new tab." | translate }}
+  </p>
+
+  <p>{{ 'If automatic login has failed, please try the following credentials manually.' | translate }}</p>
+
+  <div class="credentials">
+    <div class="url">
+      <div class="label">URL:</div>
+      <div class="value">
+        <a href="/netdata" target="_blank" ixTest="netdata-url">/netdata/</a>
+      </div>
+    </div>
+
+    <ix-input
+      class="username-input"
+      [label]="'Username' | translate"
+      [readonly]="true"
+      [formControl]="usernameControl"
+    ></ix-input>
+
+    <ix-input
+      class="password-input"
+      [label]="'Password' | translate"
+      [readonly]="true"
+      [formControl]="passwordControl"
+    ></ix-input>
+  </div>
+
+  <ix-form-actions>
+    <button mat-button ixTest="generate" (click)="onGeneratePasswordPressed()">
+      {{ 'Generate New Password' | translate }}
+    </button>
+    <button mat-button ixTest="cancel" [matDialogClose]="false">{{ 'Close' | translate }}</button>
+  </ix-form-actions>
+</div>
diff --git a/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.scss b/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.scss
new file mode 100644
index 00000000000..491e79b911f
--- /dev/null
+++ b/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.scss
@@ -0,0 +1,25 @@
+.url {
+  display: flex;
+
+  .label {
+    margin-right: 8px;
+  }
+
+  .value {
+    color: var(--primary);
+    text-decoration: underline;
+  }
+}
+
+.dialog-close {
+  margin-left: auto;
+}
+
+.username-input {
+  margin-bottom: 0;
+  margin-top: 0;
+}
+
+.password-input {
+  margin-top: 0;
+}
diff --git a/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.spec.ts b/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.spec.ts
new file mode 100644
index 00000000000..b94a468848f
--- /dev/null
+++ b/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.spec.ts
@@ -0,0 +1,65 @@
+import { HarnessLoader } from '@angular/cdk/testing';
+import { TestbedHarnessEnvironment } from '@angular/cdk/testing/testbed';
+import { ReactiveFormsModule } from '@angular/forms';
+import { MatButtonHarness } from '@angular/material/button/testing';
+import { createComponentFactory, mockProvider, Spectator } from '@ngneat/spectator/jest';
+import { mockAuth } from 'app/core/testing/utils/mock-auth.utils';
+import { mockCall, mockWebSocket } from 'app/core/testing/utils/mock-websocket.utils';
+import { IxInputHarness } from 'app/modules/ix-forms/components/ix-input/ix-input.harness';
+import { IxFormsModule } from 'app/modules/ix-forms/ix-forms.module';
+import {
+  NetdataDialogComponent,
+} from 'app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component';
+import { ReportsService } from 'app/pages/reports-dashboard/reports.service';
+import { WebSocketService } from 'app/services/ws.service';
+
+describe('NetdataDialogComponent', () => {
+  let spectator: Spectator<NetdataDialogComponent>;
+  let loader: HarnessLoader;
+  const createComponent = createComponentFactory({
+    component: NetdataDialogComponent,
+    imports: [
+      IxFormsModule,
+      ReactiveFormsModule,
+    ],
+    providers: [
+      mockAuth(),
+      mockWebSocket([
+        mockCall('reporting.netdataweb_generate_password', '12345678'),
+      ]),
+      mockProvider(ReportsService),
+    ],
+  });
+
+  beforeEach(() => {
+    spectator = createComponent();
+    loader = TestbedHarnessEnvironment.loader(spectator.fixture);
+  });
+
+  it('loads password when dialog is open', () => {
+    expect(spectator.inject(WebSocketService).call).toHaveBeenCalledWith('reporting.netdataweb_generate_password');
+  });
+
+  it('automatically attempts to open a new tab when dialog is open', () => {
+    expect(spectator.inject(ReportsService).openNetdata).toHaveBeenCalledWith('12345678');
+  });
+
+  it('shows credentials for manual login', async () => {
+    const username = await loader.getHarness(IxInputHarness.with({ label: 'Username' }));
+    const password = await loader.getHarness(IxInputHarness.with({ label: 'Password' }));
+
+    expect(username).toExist();
+    expect(password).toExist();
+    expect(await username.getValue()).toBe('root');
+    expect(await password.getValue()).toBe('12345678');
+  });
+
+  it('regenerates password when user presses Generate new password', async () => {
+    expect(spectator.inject(WebSocketService).call).toHaveBeenCalledTimes(1);
+    const generateButton = await loader.getHarness(MatButtonHarness.with({ text: 'Generate New Password' }));
+    await generateButton.click();
+
+    expect(spectator.inject(WebSocketService).call).toHaveBeenCalledTimes(2);
+    expect(spectator.inject(WebSocketService).call).toHaveBeenLastCalledWith('reporting.netdataweb_generate_password');
+  });
+});
diff --git a/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.ts b/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.ts
new file mode 100644
index 00000000000..7c084d9251b
--- /dev/null
+++ b/src/app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component.ts
@@ -0,0 +1,65 @@
+import {
+  ChangeDetectionStrategy, Component, OnInit,
+} from '@angular/core';
+import { FormControl } from '@ngneat/reactive-forms';
+import { UntilDestroy, untilDestroyed } from '@ngneat/until-destroy';
+import { Observable } from 'rxjs';
+import { tap } from 'rxjs/operators';
+import { AppLoaderService } from 'app/modules/loader/app-loader.service';
+import { ReportsService } from 'app/pages/reports-dashboard/reports.service';
+import { AuthService } from 'app/services/auth/auth.service';
+import { ErrorHandlerService } from 'app/services/error-handler.service';
+import { WebSocketService } from 'app/services/ws.service';
+
+@UntilDestroy()
+@Component({
+  selector: 'ix-netdata-dialog',
+  styleUrls: ['./netdata-dialog.component.scss'],
+  templateUrl: './netdata-dialog.component.html',
+  changeDetection: ChangeDetectionStrategy.OnPush,
+})
+export class NetdataDialogComponent implements OnInit {
+  protected readonly usernameControl = new FormControl('');
+  protected readonly passwordControl = new FormControl('');
+
+  constructor(
+    private ws: WebSocketService,
+    private reportsService: ReportsService,
+    private loader: AppLoaderService,
+    private errorHandler: ErrorHandlerService,
+    private auth: AuthService,
+  ) {}
+
+  ngOnInit(): void {
+    this.generatePassword()
+      .pipe(untilDestroyed(this))
+      .subscribe((password) => {
+        this.reportsService.openNetdata(password);
+      });
+
+    this.loadUsername();
+  }
+
+  protected onGeneratePasswordPressed(): void {
+    this.generatePassword()
+      .pipe(untilDestroyed(this))
+      .subscribe();
+  }
+
+  private loadUsername(): void {
+    this.auth.user$
+      .pipe(untilDestroyed(this))
+      .subscribe((user) => {
+        this.usernameControl.setValue(user.pw_name);
+      });
+  }
+
+  private generatePassword(): Observable<string> {
+    return this.ws.call('reporting.netdataweb_generate_password')
+      .pipe(
+        this.loader.withLoader(),
+        this.errorHandler.catchError(),
+        tap((password) => this.passwordControl.setValue(password)),
+      );
+  }
+}
diff --git a/src/app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.component.spec.ts b/src/app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.component.spec.ts
index 7f5bd1e5de7..f2be60f625e 100644
--- a/src/app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.component.spec.ts
+++ b/src/app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.component.spec.ts
@@ -2,6 +2,8 @@ import { HarnessLoader } from '@angular/cdk/testing';
 import { TestbedHarnessEnvironment } from '@angular/cdk/testing/testbed';
 import { ReactiveFormsModule } from '@angular/forms';
 import { MatButtonHarness } from '@angular/material/button/testing';
+import { MatDialog } from '@angular/material/dialog';
+import { ActivatedRoute } from '@angular/router';
 import { mockProvider, Spectator, createComponentFactory } from '@ngneat/spectator/jest';
 import { provideMockStore } from '@ngrx/store/testing';
 import { of } from 'rxjs';
@@ -10,11 +12,12 @@ import { mockCall, mockWebSocket } from 'app/core/testing/utils/mock-websocket.u
 import { Preferences } from 'app/interfaces/preferences.interface';
 import { IxDynamicFormModule } from 'app/modules/ix-dynamic-form/ix-dynamic-form.module';
 import { IxFormsModule } from 'app/modules/ix-forms/ix-forms.module';
-import { FormErrorHandlerService } from 'app/modules/ix-forms/services/form-error-handler.service';
+import {
+  NetdataDialogComponent,
+} from 'app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component';
 import { ReportsGlobalControlsComponent } from 'app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.component';
 import { ReportTab, ReportType } from 'app/pages/reports-dashboard/interfaces/report-tab.interface';
 import { ReportsService } from 'app/pages/reports-dashboard/reports.service';
-import { WebSocketService } from 'app/services/ws.service';
 import { selectPreferences } from 'app/store/preferences/preferences.selectors';
 
 describe('ReportsGlobalControlsComponent', () => {
@@ -32,11 +35,15 @@ describe('ReportsGlobalControlsComponent', () => {
       mockWebSocket([
         mockCall('disk.query', []),
         mockCall('disk.temperatures'),
-        mockCall('reporting.netdataweb_generate_password'),
         mockCall('reporting.netdata_graphs', []),
       ]),
+      mockProvider(MatDialog),
       mockAuth(),
-      mockProvider(FormErrorHandlerService),
+      mockProvider(ActivatedRoute, {
+        routeConfig: {
+          path: 'system',
+        },
+      }),
       mockProvider(ReportsService, {
         getReportTabs: () => ([({ value: ReportType.System, label: 'system' } as ReportTab)] as ReportTab[]),
         getReportGraphs: () => of([]),
@@ -59,11 +66,10 @@ describe('ReportsGlobalControlsComponent', () => {
     loader = TestbedHarnessEnvironment.loader(spectator.fixture);
   });
 
-  it('click netdata button', async () => {
+  it('opens NetdataDialog when Netdata button is pressed', async () => {
     const netdataButton = await loader.getHarness(MatButtonHarness.with({ text: 'Netdata' }));
-
     await netdataButton.click();
 
-    expect(spectator.inject(WebSocketService).call).toHaveBeenCalledWith('reporting.netdataweb_generate_password', []);
+    expect(spectator.inject(MatDialog).open).toHaveBeenCalledWith(NetdataDialogComponent);
   });
 });
diff --git a/src/app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.component.ts b/src/app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.component.ts
index 70c776e0d12..8245e590962 100644
--- a/src/app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.component.ts
+++ b/src/app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.component.ts
@@ -4,16 +4,17 @@ import {
   Component, EventEmitter, OnInit, Output,
 } from '@angular/core';
 import { FormBuilder } from '@angular/forms';
+import { MatDialog } from '@angular/material/dialog';
 import { ActivatedRoute } from '@angular/router';
 import { UntilDestroy, untilDestroyed } from '@ngneat/until-destroy';
 import { Store } from '@ngrx/store';
 import { take } from 'rxjs';
-import { AppLoaderService } from 'app/modules/loader/app-loader.service';
+import {
+  NetdataDialogComponent,
+} from 'app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component';
 import { reportingGlobalControlsElements } from 'app/pages/reports-dashboard/components/reports-global-controls/reports-global-controls.elements';
 import { ReportTab, ReportType } from 'app/pages/reports-dashboard/interfaces/report-tab.interface';
 import { ReportsService } from 'app/pages/reports-dashboard/reports.service';
-import { ErrorHandlerService } from 'app/services/error-handler.service';
-import { WebSocketService } from 'app/services/ws.service';
 import { AppState } from 'app/store';
 import { autoRefreshReportsToggled } from 'app/store/preferences/preferences.actions';
 import { waitForPreferences } from 'app/store/preferences/preferences.selectors';
@@ -44,11 +45,9 @@ export class ReportsGlobalControlsComponent implements OnInit {
     private fb: FormBuilder,
     private route: ActivatedRoute,
     private store$: Store<AppState>,
-    private loader: AppLoaderService,
-    private errorHandler: ErrorHandlerService,
     private reportsService: ReportsService,
     private cdr: ChangeDetectorRef,
-    private ws: WebSocketService,
+    private matDialog: MatDialog,
   ) {}
 
   ngOnInit(): void {
@@ -118,14 +117,6 @@ export class ReportsGlobalControlsComponent implements OnInit {
   }
 
   openNetdata(): void {
-    this.ws.call('reporting.netdataweb_generate_password', [])
-      .pipe(
-        this.loader.withLoader(),
-        this.errorHandler.catchError(),
-        untilDestroyed(this),
-      )
-      .subscribe((password) => {
-        this.reportsService.openNetdata(password);
-      });
+    this.matDialog.open(NetdataDialogComponent);
   }
 }
diff --git a/src/app/pages/reports-dashboard/reports-dashboard.module.ts b/src/app/pages/reports-dashboard/reports-dashboard.module.ts
index d7d272d6bfb..8e24cbbbac6 100644
--- a/src/app/pages/reports-dashboard/reports-dashboard.module.ts
+++ b/src/app/pages/reports-dashboard/reports-dashboard.module.ts
@@ -5,6 +5,7 @@ import { ReactiveFormsModule } from '@angular/forms';
 import { MatButtonModule } from '@angular/material/button';
 import { MatButtonToggleModule } from '@angular/material/button-toggle';
 import { MatCardModule } from '@angular/material/card';
+import { MatDialogModule } from '@angular/material/dialog';
 import { MatMenuModule } from '@angular/material/menu';
 import { MatSlideToggleModule } from '@angular/material/slide-toggle';
 import { MatToolbarModule } from '@angular/material/toolbar';
@@ -28,6 +29,9 @@ import { TestIdModule } from 'app/modules/test-id/test-id.module';
 import { ReportingExportersFormComponent } from 'app/pages/reports-dashboard/components/exporters/reporting-exporters-form/reporting-exporters-form.component';
 import { ReportingExporterListComponent } from 'app/pages/reports-dashboard/components/exporters/reporting-exporters-list/reporting-exporters-list.component';
 import { LineChartComponent } from 'app/pages/reports-dashboard/components/line-chart/line-chart.component';
+import {
+  NetdataDialogComponent,
+} from 'app/pages/reports-dashboard/components/reports-global-controls/netdata-dialog/netdata-dialog.component';
 import { ReportsDashboardComponent } from 'app/pages/reports-dashboard/reports-dashboard.component';
 import { routing } from 'app/pages/reports-dashboard/reports-dashboard.routing';
 import { PlotterService } from 'app/pages/reports-dashboard/services/plotter.service';
@@ -61,6 +65,7 @@ import { ReportsGlobalControlsComponent } from './components/reports-global-cont
     MatButtonToggleModule,
     MatSlideToggleModule,
     TestIdModule,
+    MatDialogModule,
     EmptyComponent,
     SearchInput1Component,
   ],
@@ -71,6 +76,7 @@ import { ReportsGlobalControlsComponent } from './components/reports-global-cont
     ReportingExporterListComponent,
     ReportsDashboardComponent,
     ReportsGlobalControlsComponent,
+    NetdataDialogComponent,
   ],
   providers: [
     FormatDateTimePipe,
diff --git a/src/app/pages/services/components/service-nfs/service-nfs.component.html b/src/app/pages/services/components/service-nfs/service-nfs.component.html
index 95f15c4a1b7..f1ae69f9bf7 100644
--- a/src/app/pages/services/components/service-nfs/service-nfs.component.html
+++ b/src/app/pages/services/components/service-nfs/service-nfs.component.html
@@ -89,7 +89,7 @@
 
         <ix-checkbox
           formControlName="userd_manage_gids"
-          [label]="'Support >16 groups' | translate"
+          [label]="'Manage Groups Server-side' | translate"
           [tooltip]="tooltips.userd_manage_gids"
         ></ix-checkbox>
       </ix-fieldset>
diff --git a/src/app/pages/services/components/service-nfs/service-nfs.component.spec.ts b/src/app/pages/services/components/service-nfs/service-nfs.component.spec.ts
index fa00ad14eac..c823fca5cbc 100644
--- a/src/app/pages/services/components/service-nfs/service-nfs.component.spec.ts
+++ b/src/app/pages/services/components/service-nfs/service-nfs.component.spec.ts
@@ -98,7 +98,7 @@ describe('ServiceNfsComponent', () => {
       'rpc.lockd(8) bind port': '124',
       'rpc.statd(8) bind port': '124',
       'Allow non-root mount': false,
-      'Support >16 groups': false,
+      'Manage Groups Server-side': false,
     });
   });
 
@@ -111,7 +111,7 @@ describe('ServiceNfsComponent', () => {
       'NFSv3 ownership model for NFSv4': false,
       'NFSv4 DNS Domain': 'new-nfs-domain.com',
       'Allow non-root mount': true,
-      'Support >16 groups': true,
+      'Manage Groups Server-side': true,
       'mountd(8) bind port': 554,
       'rpc.statd(8) bind port': 562,
       'rpc.lockd(8) bind port': 510,
@@ -149,7 +149,7 @@ describe('ServiceNfsComponent', () => {
     });
   });
 
-  it('disables Support >16 groups when NFSv3 ownership model is on', async () => {
+  it('disables Manage Groups Server-side when NFSv3 ownership model is on', async () => {
     const form = await loader.getHarness(IxFormHarness);
     await form.fillForm({
       'Enabled Protocols': ['NFSv4'],
@@ -157,8 +157,8 @@ describe('ServiceNfsComponent', () => {
     });
 
     const controls = await form.getControlHarnessesDict();
-    const supportMoreThan16GroupsControl = controls['Support >16 groups'] as IxCheckboxHarness;
-    expect(await supportMoreThan16GroupsControl.isDisabled()).toBe(true);
+    const serverSideGroupsControl = controls['Manage Groups Server-side'] as IxCheckboxHarness;
+    expect(await serverSideGroupsControl.isDisabled()).toBe(true);
   });
 
   it('should open dialog form when add SPN button is pressed', async () => {
diff --git a/src/app/pages/services/components/service-nfs/service-nfs.component.ts b/src/app/pages/services/components/service-nfs/service-nfs.component.ts
index 5da95e2e152..f3bc29fcc90 100644
--- a/src/app/pages/services/components/service-nfs/service-nfs.component.ts
+++ b/src/app/pages/services/components/service-nfs/service-nfs.component.ts
@@ -64,7 +64,7 @@ export class ServiceNfsComponent implements OnInit {
     mountd_port: helptextServiceNfs.nfs_srv_mountd_port_tooltip,
     rpcstatd_port: helptextServiceNfs.nfs_srv_rpcstatd_port_tooltip,
     rpclockd_port: helptextServiceNfs.nfs_srv_rpclockd_port_tooltip,
-    userd_manage_gids: helptextServiceNfs.nfs_srv_16_tooltip,
+    userd_manage_gids: helptextServiceNfs.userd_manage_gids,
   };
 
   readonly ipChoices$ = this.ws.call('nfs.bindip_choices').pipe(choicesToOptions());
diff --git a/src/app/pages/storage/components/dashboard-pool/topology-card/topology-card.component.spec.ts b/src/app/pages/storage/components/dashboard-pool/topology-card/topology-card.component.spec.ts
index 47f52648999..2ddb2e4f7e5 100644
--- a/src/app/pages/storage/components/dashboard-pool/topology-card/topology-card.component.spec.ts
+++ b/src/app/pages/storage/components/dashboard-pool/topology-card/topology-card.component.spec.ts
@@ -96,7 +96,14 @@ describe('TopologyCardComponent', () => {
           repeats: 1,
         }).addLogTopology(2, true, 2)
         .addCacheTopology(2, 2)
-        .addSpareTopology(3, 8);
+        .addSpareTopology(3, 8)
+        .addDedupTopology({
+          scenario: MockStorageScenario.NoRedundancy,
+          layout: TopologyItemType.Stripe,
+          diskSize: 4,
+          width: 1,
+          repeats: 0,
+        });
 
       spectator = createComponent({
         props: {
@@ -109,7 +116,7 @@ describe('TopologyCardComponent', () => {
     it('rendering VDEVs rows', () => {
       const captions = spectator.queryAll('.vdev-line b');
       const values = spectator.queryAll('.vdev-line .vdev-value');
-      expect(spectator.queryAll('.vdev-line .warning ix-icon')).toHaveLength(1);
+      expect(spectator.queryAll('.vdev-line .warning .ix-icon')).toHaveLength(1);
       expect(captions).toHaveLength(6);
       expect(values).toHaveLength(6);
 
@@ -132,7 +139,7 @@ describe('TopologyCardComponent', () => {
       expect(captions[1]).toHaveText('Metadata');
       expect(values[1]).toHaveText('1 x MIRROR | 3 wide | 4 TiB');
       expect(captions[5]).toHaveText('Dedup VDEVs');
-      expect(values[5]).toHaveText('VDEVs not assigned');
+      expect(values[5]).toHaveText('4 x DISK | 1 wide | 4 TiB');
     });
 
     it('rendering status icon', () => {
diff --git a/src/app/pages/storage/components/dashboard-pool/topology-card/topology-card.component.ts b/src/app/pages/storage/components/dashboard-pool/topology-card/topology-card.component.ts
index 66d5d7d15a5..796216d853a 100644
--- a/src/app/pages/storage/components/dashboard-pool/topology-card/topology-card.component.ts
+++ b/src/app/pages/storage/components/dashboard-pool/topology-card/topology-card.component.ts
@@ -103,8 +103,8 @@ export class TopologyCardComponent implements OnInit, OnChanges {
     this.topologyWarningsState.log = this.parseDevsWarnings(topology.log, VdevType.Log);
     this.topologyWarningsState.cache = this.parseDevsWarnings(topology.cache, VdevType.Cache);
     this.topologyWarningsState.spare = this.parseDevsWarnings(topology.spare, VdevType.Spare);
-    this.topologyWarningsState.metadata = this.parseDevsWarnings(topology.special, VdevType.Special, topology.data);
-    this.topologyWarningsState.dedup = this.parseDevsWarnings(topology.dedup, VdevType.Dedup, topology.data);
+    this.topologyWarningsState.metadata = this.parseDevsWarnings(topology.special, VdevType.Special);
+    this.topologyWarningsState.dedup = this.parseDevsWarnings(topology.dedup, VdevType.Dedup);
 
     this.topologyState.data = this.parseDevs(topology.data, VdevType.Data, this.topologyWarningsState.data);
     this.topologyState.log = this.parseDevs(topology.log, VdevType.Log, this.topologyWarningsState.log);
@@ -167,12 +167,12 @@ export class TopologyCardComponent implements OnInit, OnChanges {
     return outputString;
   }
 
-  private parseDevsWarnings(vdevs: TopologyItem[], category: VdevType, dataVdevs?: TopologyItem[]): string {
+  private parseDevsWarnings(vdevs: TopologyItem[], category: VdevType): string {
     let outputString = '';
     const disks: Disk[] = this.disks.map((disk: StorageDashboardDisk) => {
       return this.dashboardDiskToDisk(disk);
     });
-    const warnings = this.storageService.validateVdevs(category, vdevs, disks, dataVdevs);
+    const warnings = this.storageService.validateVdevs(category, vdevs, disks);
     if (warnings.length === 1) {
       outputString = warnings[0];
     }
diff --git a/src/app/pages/system/advanced/system-security/system-security-form/system-security-form.component.ts b/src/app/pages/system/advanced/system-security/system-security-form/system-security-form.component.ts
index 7c75b5d9c8e..2d5a55a05a7 100644
--- a/src/app/pages/system/advanced/system-security/system-security-form/system-security-form.component.ts
+++ b/src/app/pages/system/advanced/system-security/system-security-form/system-security-form.component.ts
@@ -5,7 +5,7 @@ import { FormBuilder } from '@angular/forms';
 import { UntilDestroy, untilDestroyed } from '@ngneat/until-destroy';
 import { Store } from '@ngrx/store';
 import { TranslateService } from '@ngx-translate/core';
-import { EMPTY } from 'rxjs';
+import { EMPTY, Observable } from 'rxjs';
 import { switchMap, take } from 'rxjs/operators';
 import { Role } from 'app/enums/role.enum';
 import { SystemSecurityConfig } from 'app/interfaces/system-security-config.interface';
@@ -66,11 +66,11 @@ export class SystemSecurityFormComponent implements OnInit {
     )
       .afterClosed()
       .pipe(
+        switchMap(() => this.promptForRestart()),
         this.errorHandler.catchError(),
         untilDestroyed(this),
       )
       .subscribe(() => {
-        this.promptForRestart();
         this.chainedRef.close({ response: true, error: null });
         this.snackbar.success(this.translate.instant('System Security Settings Updated.'));
       });
@@ -81,8 +81,8 @@ export class SystemSecurityFormComponent implements OnInit {
     this.cdr.markForCheck();
   }
 
-  private promptForRestart(): void {
-    this.isHaLicensed$
+  private promptForRestart(): Observable<unknown> {
+    return this.isHaLicensed$
       .pipe(
         take(1),
         switchMap((isHaLicensed) => {
@@ -93,8 +93,6 @@ export class SystemSecurityFormComponent implements OnInit {
 
           return this.fips.promptForRestart();
         }),
-        untilDestroyed(this),
-      )
-      .subscribe();
+      );
   }
 }
diff --git a/src/app/services/gpu/gpu-service.spec.ts b/src/app/services/gpu/gpu-service.spec.ts
index 3638a97632b..2a23c8aa1c2 100644
--- a/src/app/services/gpu/gpu-service.spec.ts
+++ b/src/app/services/gpu/gpu-service.spec.ts
@@ -59,7 +59,7 @@ describe('GpuService', () => {
       const gpus = await firstValueFrom(spectator.service.getAllGpus());
 
       expect(gpus).toEqual(allGpus);
-      expect(spectator.inject(WebSocketService).call).toHaveBeenCalledWith('device.get_info', [DeviceType.Gpu]);
+      expect(spectator.inject(WebSocketService).call).toHaveBeenCalledWith('device.get_info', [{ type: DeviceType.Gpu }]);
     });
   });
 
diff --git a/src/app/services/gpu/gpu.service.ts b/src/app/services/gpu/gpu.service.ts
index 674e864d4eb..2ee0b62a3c5 100644
--- a/src/app/services/gpu/gpu.service.ts
+++ b/src/app/services/gpu/gpu.service.ts
@@ -29,7 +29,7 @@ export class GpuService {
    */
   getAllGpus(): Observable<Device[]> {
     if (!this.allGpus$) {
-      this.allGpus$ = this.ws.call('device.get_info', [DeviceType.Gpu]).pipe(
+      this.allGpus$ = this.ws.call('device.get_info', [{ type: DeviceType.Gpu }]).pipe(
         shareReplay({
           refCount: false,
           bufferSize: 1,
diff --git a/src/app/services/storage.service.spec.ts b/src/app/services/storage.service.spec.ts
index 4da2d4a2fd9..5239a33b899 100644
--- a/src/app/services/storage.service.spec.ts
+++ b/src/app/services/storage.service.spec.ts
@@ -375,37 +375,5 @@ describe('StorageService', () => {
       // Let's just check to see if the our warning is present
       expect(warnings).toContain(TopologyWarning.MixedVdevLayout);
     });
-
-    it('generates warning for "Redundancy Mismatch"', () => {
-      /*
-      * NOTE: Special and Dedup categories should match redundancy level of data VDEVs
-      * */
-
-      const storage = new MockStorageGenerator();
-
-      storage.addDataTopology({
-        scenario: MockStorageScenario.Uniform,
-        layout: TopologyItemType.Raidz3,
-        diskSize: 4,
-        width: 7,
-        repeats: 2,
-      }).addSpecialTopology({
-        scenario: MockStorageScenario.Uniform,
-        layout: TopologyItemType.Mirror,
-        diskSize: 4,
-        width: 3,
-        repeats: 1,
-      });
-
-      const warnings = storageService.validateVdevs(
-        VdevType.Special,
-        storage.poolState.topology.special,
-        storage.disks,
-        storage.poolState.topology.data,
-      );
-
-      expect(warnings).toHaveLength(1);
-      expect(warnings).toContain(TopologyWarning.RedundancyMismatch);
-    });
   });
 });
diff --git a/src/app/services/storage.service.ts b/src/app/services/storage.service.ts
index 3bf04ccb8b4..3969f6a395f 100644
--- a/src/app/services/storage.service.ts
+++ b/src/app/services/storage.service.ts
@@ -8,9 +8,6 @@ import { Option } from 'app/interfaces/option.interface';
 import { Disk, TopologyItem } from 'app/interfaces/storage.interface';
 import { WebSocketService } from 'app/services/ws.service';
 
-const specialRedundancyCategories = [VdevType.Dedup, VdevType.Special];
-const redundancyCategories = [...specialRedundancyCategories, VdevType.Data];
-
 @Injectable()
 export class StorageService {
   protected diskResource = 'disk.query' as const;
@@ -155,7 +152,6 @@ export class StorageService {
     category: VdevType,
     vdevs: TopologyItem[],
     disks: Disk[],
-    dataVdevs?: TopologyItem[],
   ): string[] {
     const warnings: string[] = [];
     let isMixedVdevCapacity = false;
@@ -199,14 +195,12 @@ export class StorageService {
       }
 
       // Check Redundancy
-      if (redundancyCategories.includes(category) && this.hasZeroRedundancyLevelVdev(vdevs)) {
+      if (
+        [VdevType.Data, VdevType.Dedup, VdevType.Special].includes(category)
+        && this.hasZeroRedundancyLevelVdev(vdevs)
+      ) {
         warnings.push(TopologyWarning.NoRedundancy);
       }
-
-      // Check that special & dedup VDEVs have same redundancy level as data VDEVs
-      if (specialRedundancyCategories.includes(category) && this.isSpecialRedundancyMismatch(vdevs, dataVdevs)) {
-        warnings.push(TopologyWarning.RedundancyMismatch);
-      }
     }
 
     return warnings;
diff --git a/src/assets/i18n/af.json b/src/assets/i18n/af.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/af.json
+++ b/src/assets/i18n/af.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ar.json b/src/assets/i18n/ar.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ar.json
+++ b/src/assets/i18n/ar.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ast.json b/src/assets/i18n/ast.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ast.json
+++ b/src/assets/i18n/ast.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/az.json b/src/assets/i18n/az.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/az.json
+++ b/src/assets/i18n/az.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/be.json b/src/assets/i18n/be.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/be.json
+++ b/src/assets/i18n/be.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/bg.json b/src/assets/i18n/bg.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/bg.json
+++ b/src/assets/i18n/bg.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/bn.json b/src/assets/i18n/bn.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/bn.json
+++ b/src/assets/i18n/bn.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/br.json b/src/assets/i18n/br.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/br.json
+++ b/src/assets/i18n/br.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/bs.json b/src/assets/i18n/bs.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/bs.json
+++ b/src/assets/i18n/bs.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ca.json b/src/assets/i18n/ca.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ca.json
+++ b/src/assets/i18n/ca.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/cs.json b/src/assets/i18n/cs.json
index 58411fa0d3a..4c82a0b3e29 100644
--- a/src/assets/i18n/cs.json
+++ b/src/assets/i18n/cs.json
@@ -981,7 +981,7 @@
   "Define the target as *iSCSI*, *Fibre Channel*, or *Both*.": "",
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
@@ -1270,6 +1270,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
   "Enable the SNMPv3 security model.": "",
@@ -1321,7 +1322,7 @@
   "Ensure valid entries exist in  <b>Directory Services > Kerberos Realms</b> and  <b>Directory Services > Kerberos Keytabs</b> and the system  can communicate with the Kerberos Domain Controller before  enabling this option.": "",
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a list of allowed hostnames or IP addresses.    Separate entries by pressing <code>Enter</code>. A more detailed description     with examples can be found     <a href=\"{url}\" target=\"_blank\">here</a>. <br><br>     If neither *Hosts Allow* or *Hosts Deny* contains     an entry, then SMB share access is allowed for any host. <br><br>     If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow     hosts on the *Hosts Allow* list. <br><br>     If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all     hosts that are not on the *Hosts Deny* list. <br><br>     If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts     that are on the *Hosts Allow* list. <br><br>     If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list,     then allow it.": "",
   "Enter a list of chat IDs separated by space, comma or semicolon.  To find your chat ID send a message to the bot, group or channel and visit  <a href=\"https://api.telegram.org/bot(BOT_TOKEN)/getUpdates\"  target=\"_blank\">https://api.telegram.org/bot(BOT_TOKEN)/getUpdates</a>.": "",
@@ -1332,7 +1333,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/statd.8.html\" target=\"_blank\">rpc.statd(8)</a>.": "",
@@ -1550,6 +1551,7 @@
   "Generate Encryption Key": "",
   "Generate Key": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1710,6 +1712,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If set, the DNS name of the client must resolve to its IP address and the cert must contain the same DNS name.": "",
@@ -1828,6 +1831,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -1969,6 +1973,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2009,6 +2014,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2121,6 +2127,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2496,6 +2503,7 @@
   "Post Init": "",
   "Post Script": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Pre Init": "",
   "Pre Script": "",
@@ -2946,13 +2954,14 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3084,7 +3093,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3125,7 +3134,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3141,6 +3149,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Setup Method": "",
@@ -3354,7 +3363,6 @@
   "Summary": "",
   "Sun": "",
   "Sunday": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -3655,6 +3663,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -3948,7 +3957,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning!": "",
@@ -3960,6 +3969,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
   "Web Interface HTTP Port": "",
@@ -4124,6 +4134,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4165,11 +4176,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": " Pokud je <b>UPS mód</b> ve stavu <i>slave</i>. Vložte otevřený port UPS <i>Master</i> systému. Výchozí port je <i>3493</i>.",
@@ -4569,7 +4586,6 @@
   "Select Disk Type": "Vybrat typ disku",
   "Select a keyboard layout.": "Vyberte rozvržení klávesnice.",
   "Select a pool, dataset, or zvol.": "Vybrat fond, datovou sadu nebo zfs svazek.",
-  "Select a screen resolution to use for VNC sessions.": "Vyberte rozlišení obrazovky které používat pro VNC relace.",
   "Select a time zone.": "Vyberte časovou zónu",
   "Select an existing extent.": "Vyberte existující extent.",
   "Select an existing target.": "Vyberte existující cíl.",
diff --git a/src/assets/i18n/cy.json b/src/assets/i18n/cy.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/cy.json
+++ b/src/assets/i18n/cy.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/da.json b/src/assets/i18n/da.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/da.json
+++ b/src/assets/i18n/da.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/de.json b/src/assets/i18n/de.json
index 5ac14b87c7b..87f45746def 100644
--- a/src/assets/i18n/de.json
+++ b/src/assets/i18n/de.json
@@ -760,7 +760,7 @@
   "Define the system services that are allowed to communicate externally. All other external traffic is restricted.": "",
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
@@ -981,6 +981,7 @@
   "Enable a Display (Virtual Network Computing) remote connection. Requires <i>UEFI</i> booting.": "",
   "Enable for TrueNAS to periodically review data blocks and identify empty blocks, or obsolete blocks that can be deleted. Unset to use dirty block overwrites (default).": "",
   "Enable passwordless sudo for zfs commands": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable this SMB share. Unset to disable this SMB share without deleting it.": "",
   "Enable to use thin provisioning where disk space for this volume is allocated <b>‘on demand’</b> as new writes are received. Use caution when enabling this feature, as writes can fail when the pool is low on space.": "",
@@ -1029,7 +1030,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a list of allowed hostnames or IP addresses.    Separate entries by pressing <code>Enter</code>. A more detailed description     with examples can be found     <a href=\"{url}\" target=\"_blank\">here</a>. <br><br>     If neither *Hosts Allow* or *Hosts Deny* contains     an entry, then SMB share access is allowed for any host. <br><br>     If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow     hosts on the *Hosts Allow* list. <br><br>     If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all     hosts that are not on the *Hosts Deny* list. <br><br>     If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts     that are on the *Hosts Allow* list. <br><br>     If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list,     then allow it.": "",
   "Enter a list of chat IDs separated by space, comma or semicolon.  To find your chat ID send a message to the bot, group or channel and visit  <a href=\"https://api.telegram.org/bot(BOT_TOKEN)/getUpdates\"  target=\"_blank\">https://api.telegram.org/bot(BOT_TOKEN)/getUpdates</a>.": "",
@@ -1037,7 +1038,7 @@
   "Enter a long string of random characters for  use as <a href=\"https://searchsecurity.techtarget.com/definition/salt\"  target=\"_blank\">salt</a> for the encryption password. <b>Warning:</b>  Always securely back up the encryption salt value! Losing the salt  value will result in data loss.": "",
   "Enter a name for the interface. Use the format <samp>bond<i>X</i></samp>, <samp>vlan<i>X</i></samp>, or <samp>br<i>X</i></samp> where <i>X</i> is a number representing a non-parent interface. Read-only when editing an interface.": "",
   "Enter a number of degrees in Celsius. S.M.A.R.T. reports if the temperature of a drive has changed by N degrees Celsius since the last report.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/statd.8.html\" target=\"_blank\">rpc.statd(8)</a>.": "",
@@ -1234,6 +1235,7 @@
   "Generate Debug File": "",
   "Generate Encryption Key": "",
   "Generate Key": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1379,6 +1381,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If set, the user home directory is checked for a <b>.tlslogin</b> file which contains one or more PEM-encoded certificates. If not found, the user is prompted for password authentication.": "",
@@ -1494,6 +1497,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -1619,6 +1623,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -1656,6 +1661,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -1747,6 +1753,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2106,6 +2113,7 @@
   "Post Init": "",
   "Post Script": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Pre Init": "",
   "Pre Script": "",
@@ -2422,10 +2430,12 @@
   "Select a preset ACL": "",
   "Select a schedule preset or choose <i>Custom</i>  to open the advanced scheduler. Note that an in-progress cron task postpones  any later scheduled instance of the same task until the running task is  complete.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select action": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
   "Select disks you want to use": "",
@@ -2482,6 +2492,7 @@
   "Set production status as active": "",
   "Set the domain name to the username. Unset to prevent name collisions when Allow Trusted Domains is set and multiple domains use the same username.": "",
   "Set to automatically configure the IPv6. Only one interface can be configured this way.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to inhibit some syslog diagnostics to avoid error messages. See <a href=\"https://man7.org/linux/man-pages/man5/exports.5.html\" target=\"_blank\">exports(5)</a> for examples.": "",
   "Set to log <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a> syslog requests.": "",
   "Set to log <a href=\"https://man7.org/linux/man-pages/man8/statd.8.html\" target=\"_blank\">rpc.statd(8)</a> and <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a> syslog requests.": "",
@@ -2511,7 +2522,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -2526,6 +2536,7 @@
   "Setting this option is discouraged as it increases security risk.": "",
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Setup Method": "",
@@ -2727,7 +2738,6 @@
   "Summary": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -2977,6 +2987,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology Summary": "",
@@ -3220,6 +3231,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Warning!": "",
   "Warning: Debugs may contain log files with personal information such as usernames or other identifying information about your system. Please review debugs and redact any sensitive information before sharing with external entities.": "",
@@ -3230,6 +3242,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Web Shell Access": "",
   "WebDAV": "",
   "WebDAV Service": "",
@@ -3372,6 +3385,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -3413,11 +3427,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": " Wenn der <b>USV Modus</b> auf <i>Slave</i> eingestellt wurde. Geben Sie den im Netz erreichbaren Netzwerkport des USV <i>Master</i> Systems ein. Der Standardport hierfür ist <i>3493</i>.",
@@ -4341,11 +4361,9 @@
   "Select a schedule preset or choose <i>Custom</i>                to open the advanced scheduler.": "Wählen Sie eine Zeitplanvoreinstellung aus, oder wählen Sie <i>Custom</i>, um den erweiterten Planer zu öffnen.",
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "Wählen Sie eine Zeitplanvoreinstellung aus, oder wählen Sie <i>Custom</i>, um den erweiterten Planer zu öffnen.",
   "Select a schema when Samba Schema is set.": "Wählen Sie ein Schema aus, wenn Samba-Schema festgelegt ist.",
-  "Select a screen resolution to use for VNC sessions.": "Wählen Sie eine Bildschirmauflösung aus, die für VNC-Sitzungen verwendet werden soll.",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "Wählen Sie eine Sektorgröße in Bytes aus. <i>Default</i> lässt die Sektorgröße ungesetzt und verwendet die ZFS-Volume-Werte. Das Festlegen einer Sektorgröße ändert sowohl die logische als auch die physische Sektorgröße.",
   "Select a time zone.": "Wählen Sie eine Zeitzone aus.",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "Wählen Sie ein Benutzerkonto aus, um den Befehl auszuführen. Der Benutzer muss über Berechtigungen verfügen, die es ihm ermöglichen, den Befehl oder das Skript auszuführen.",
-  "Select an IP address to use for VNC sessions.": "Wählen Sie eine IP-Adresse aus, die für VNC-Sitzungen verwendet werden soll.",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "Wählen Sie eine vorhandene SSH-Verbindung zu einem Remotesystem aus, oder wählen Sie <i>Neu erstellen</i> um eine neue SSH-Verbindung zu erstellen.",
   "Select an existing extent.": "Wählen Sie eine vorhandene Ausmaß aus.",
   "Select an existing portal or choose <i>Create New</i> to configure a new portal.": "Wählen Sie ein vorhandenes Portal aus, oder wählen Sie <i>Neu erstellen</i> um ein neues Portal zu konfigurieren.",
@@ -4439,7 +4457,6 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "Legen Sie fest, dass diese Replikationsaufgabe entweder unmittelbar nach Abschluss des verknüpften periodischen Snapshot-Tasks gestartet wird, oder dass sie ein separatern <b>Zeitplan</b> für diese Replikation erstellen.",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "Aktivieren Sie diese Option, um DHCP zu aktivieren. Lassen Sie diese Option deaktiviert, um eine statische IPv4- oder IPv6-Konfiguration zu erstellen. Für DHCP kann nur eine Schnittstelle konfiguriert werden.",
   "Set to enable Samba to do DNS updates when joining a domain.": "Legen Sie fest, dass Samba beim Beitritt zu einer Domain DNS-Updates durchführen kann.",
-  "Set to enable connecting to the VNC web interface.": "Aktivieren Sie diese Option, um die Verbindung zur VNC-Weboberfläche herzustellen.",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "Aktivieren Sie diese Option, um das File eXchange-Protokoll zu aktivieren. Diese Option macht den Server anfällig für FTP-Bounce-Angriffe, daher wird dies nicht empfohlen.",
   "Set to enable the iSCSI extent.": "Festlegen, um den iSCSI-Bereich zu aktivieren.",
   "Set to export the certificate environment variables.": "Zum Exportieren der Zertifikatumgebungsvariablen festlegen.",
@@ -4632,7 +4649,6 @@
   "Volume size cannot be zero.": "Die Größe des Volumens kann nicht Null sein.",
   "WARNING": "WARNUNG",
   "WARNING: A failover will  temporarily interrupt system services.": "WARNUNG: Ein Failover unterbricht vorübergehend den Systemdienst.",
-  "Wait to start VM until VNC client connects.": "Warten Sie, bis die VM gestartet wird, bis der VNC-Client eine Verbindung herstellt.",
   "Waiting for Active TrueNAS controller to come up...": "Warten auf den Start des Active TrueNAS-Controllers...",
   "Warning": "Warnung",
   "Weak Ciphers": "Schwache Verschlüsselungen",
diff --git a/src/assets/i18n/dsb.json b/src/assets/i18n/dsb.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/dsb.json
+++ b/src/assets/i18n/dsb.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/el.json b/src/assets/i18n/el.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/el.json
+++ b/src/assets/i18n/el.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/en-au.json b/src/assets/i18n/en-au.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/en-au.json
+++ b/src/assets/i18n/en-au.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/en-gb.json b/src/assets/i18n/en-gb.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/en-gb.json
+++ b/src/assets/i18n/en-gb.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/en.json b/src/assets/i18n/en.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/en.json
+++ b/src/assets/i18n/en.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/eo.json b/src/assets/i18n/eo.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/eo.json
+++ b/src/assets/i18n/eo.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/es-ar.json b/src/assets/i18n/es-ar.json
index 41fd4df8239..7d65b64a342 100644
--- a/src/assets/i18n/es-ar.json
+++ b/src/assets/i18n/es-ar.json
@@ -404,6 +404,7 @@
   "Define a number of minutes for <a href=\"https://linux.die.net/man/8/smartd\" target=\"_blank\">smartd</a> to wake up and check if any tests are configured to run.": "",
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
   "Delete All Selected": "",
@@ -524,6 +525,7 @@
   "Enable a Display (Virtual Network Computing) remote connection. Requires <i>UEFI</i> booting.": "",
   "Enable for TrueNAS to periodically review data blocks and identify empty blocks, or obsolete blocks that can be deleted. Unset to use dirty block overwrites (default).": "",
   "Enable passwordless sudo for zfs commands": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable this SMB share. Unset to disable this SMB share without deleting it.": "",
   "Enable to use thin provisioning where disk space for this volume is allocated <b>‘on demand’</b> as new writes are received. Use caution when enabling this feature, as writes can fail when the pool is low on space.": "",
   "Enable/Disable STP on the bridge interfaces configurable.": "",
@@ -543,11 +545,12 @@
   "Ensure Display Device": "",
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a list of allowed hostnames or IP addresses.    Separate entries by pressing <code>Enter</code>. A more detailed description     with examples can be found     <a href=\"{url}\" target=\"_blank\">here</a>. <br><br>     If neither *Hosts Allow* or *Hosts Deny* contains     an entry, then SMB share access is allowed for any host. <br><br>     If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow     hosts on the *Hosts Allow* list. <br><br>     If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all     hosts that are not on the *Hosts Deny* list. <br><br>     If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts     that are on the *Hosts Allow* list. <br><br>     If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list,     then allow it.": "",
   "Enter a name for the interface. Use the format <samp>bond<i>X</i></samp>, <samp>vlan<i>X</i></samp>, or <samp>br<i>X</i></samp> where <i>X</i> is a number representing a non-parent interface. Read-only when editing an interface.": "",
   "Enter a number of degrees in Celsius. S.M.A.R.T. reports if the temperature of a drive has changed by N degrees Celsius since the last report.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/statd.8.html\" target=\"_blank\">rpc.statd(8)</a>.": "",
@@ -646,6 +649,7 @@
   "GUI": "",
   "General": "",
   "General Info": "",
+  "Generate New Password": "",
   "Generic": "",
   "Generic dataset suitable for any share type.": "",
   "Give your exporter configuration a name": "",
@@ -724,6 +728,7 @@
   "Identify light is now off.": "",
   "Idle": "",
   "Idmap": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If set, the value will be used to override the default DNS domain name for NFSv4. Specifies the \"Domain\" idmapd.conf setting.": "",
@@ -801,6 +806,7 @@
   "JBOF Write": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "KDC": "",
   "KMIP": "",
   "KMIP Read": "",
@@ -882,6 +888,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -911,6 +918,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -969,6 +977,7 @@
   "Move widget down": "",
   "Move widget up": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "N/A": "",
@@ -1201,6 +1210,7 @@
   "Post Init": "",
   "Post Script": "",
   "Post-script": "",
+  "Power Menu": "",
   "Pre Init": "",
   "Pre Script": "",
   "Pre-script": "",
@@ -1453,10 +1463,12 @@
   "Select VDEV layout. This is the first step in setting up your VDEVs.": "",
   "Select a layout": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select action": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
   "Select disks you want to use": "",
@@ -1507,11 +1519,13 @@
   "Set new password:": "",
   "Set the domain name to the username. Unset to prevent name collisions when Allow Trusted Domains is set and multiple domains use the same username.": "",
   "Set to automatically configure the IPv6. Only one interface can be configured this way.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to inhibit some syslog diagnostics to avoid error messages. See <a href=\"https://man7.org/linux/man-pages/man5/exports.5.html\" target=\"_blank\">exports(5)</a> for examples.": "",
   "Set to log <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a> syslog requests.": "",
   "Set to log <a href=\"https://man7.org/linux/man-pages/man8/statd.8.html\" target=\"_blank\">rpc.statd(8)</a> and <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a> syslog requests.": "",
   "Set to prevent the zvol from being modified.": "",
   "Set up TrueNAS authentication method:": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Setup Pool To Create Custom App": "",
@@ -1805,6 +1819,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Topology Summary": "",
   "Total": "",
   "Total Allocation": "",
@@ -1976,6 +1991,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Warning!": "",
   "Warning: Debugs may contain log files with personal information such as usernames or other identifying information about your system. Please review debugs and redact any sensitive information before sharing with external entities.": "",
@@ -1985,6 +2001,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Web Shell Access": "",
   "WebDAV": "",
   "WebDAV Service": "",
@@ -2095,6 +2112,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -2136,11 +2154,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": " Cuando el <b>Modo UPS</b> está configurado en <i>esclavo</i>. Ingrese el número de puerto de red abierto del sistema UPS <i>Master</i>. El puerto predeterminado es <i>3493</i>.",
@@ -2800,7 +2824,6 @@
   "Define the system services that are allowed to communicate externally. All other external traffic is restricted.": "Defina los servicios del sistema que pueden comunicarse externamente. Todo el resto del tráfico externo está restringido.",
   "Define the target as *iSCSI*, *Fibre Channel*, or *Both*.": "Defina el destino como *iSCSI*, *Fibre Channel * o *Ambos*.",
   "Delay Updates": "Retraso de actualizaciones",
-  "Delay VM Boot Until VNC Connects": "Retrasar el arranque de VM hasta que se conecte VNC",
   "Delete": "Eliminar",
   "Delete API Key": "Eliminar clave de API",
   "Delete Children": "Eliminar niños",
@@ -3054,7 +3077,6 @@
   "Endpoint type to choose from the service catalogue. <i>Public</i> is recommended, see the <a href=\"https://rclone.org/swift/#swift-region\" target=\"_blank\">rclone documentation</a>.": "Tipo de punto final para elegir del catálogo de servicios. Se recomienda <i>Público</i>, consulte la <a href=\"https://rclone.org/swift/#swift-region\" target=\"_blank\">documentación de rclone</a>.",
   "Ensure valid entries exist in  <b>Directory Services > Kerberos Realms</b> and  <b>Directory Services > Kerberos Keytabs</b> and the system  can communicate with the Kerberos Domain Controller before  enabling this option.": "Asegúrese de que existan entradas válidas en <b>Servicios de directorio > Reinos Kerberos</b> y <b>Servicios de directorio> Tablas clave Kerberos</b> y que el sistema pueda comunicarse con el Controlador de dominio Kerberos antes de habilitar esta opción.",
   "Enter a Name (optional)": "Ingrese un nombre (opcional)",
-  "Enter a VNC password to automatically pass to the VNC session.": "Ingrese una contraseña de VNC para pasar automáticamente a la sesión de VNC.",
   "Enter a description of the Cloud Sync Task.": "Ingrese una descripción de la tarea de sincronización en la nube.",
   "Enter a description of the cron job.": "Ingrese una descripción del trabajo cron.",
   "Enter a description of the interface.": "Ingrese una descripción de la interfaz.",
@@ -4033,11 +4055,9 @@
   "Select a schedule preset or choose <i>Custom</i>  to open the advanced scheduler. Note that an in-progress cron task postpones  any later scheduled instance of the same task until the running task is  complete.": "Seleccione un programa preestablecido o elija <i>Personalizado</i> para abrir el programador avanzado. Tenga en cuenta que una tarea cron en progreso pospone cualquier instancia programada posterior de la misma tarea hasta que se complete la tarea en ejecución.",
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "Seleccione un programa preestablecido o elija <i> Personalizado </i> para abrir el programador avanzado.",
   "Select a schema when Samba Schema is set.": "Seleccione un esquema cuando Samba Schema esté configurado.",
-  "Select a screen resolution to use for VNC sessions.": "Seleccione una resolución de pantalla para usar en las sesiones de VNC.",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "Seleccione un tamaño de sector en bytes. <i> Predeterminado </i> deja el tamaño del sector sin definir y utiliza los valores de volumen ZFS. Establecer un tamaño de sector cambia el tamaño del sector lógico y físico.",
   "Select a time zone.": "Seleccione una zona horaria.",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "Seleccione una cuenta de usuario para ejecutar el comando. El usuario debe tener permisos que le permitan ejecutar el comando o script.",
-  "Select an IP address to use for VNC sessions.": "Seleccione una dirección IP para usar en las sesiones de VNC.",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "Seleccione una conexión SSH existente a un sistema remoto o elija <i> Crear nueva </i> para crear una nueva conexión SSH.",
   "Select an existing extent.": "Seleccione una extensión existente.",
   "Select an existing portal or choose <i>Create New</i> to configure a new portal.": "Seleccione un portal existente o elija <i> Crear nuevo </i> para configurar un nuevo portal.",
@@ -4137,7 +4157,6 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "Configure esta opción para iniciar esta tarea de replicación inmediatamente después de que la tarea de instantánea periódica vinculada se complete o continúe creando una <b> Programación </b> separada para esta replicación.",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "Establezca para habilitar DHCP. Deje sin configurar para crear una configuración estática de IPv4 o IPv6. Solo se puede configurar una interfaz para DHCP.",
   "Set to enable Samba to do DNS updates when joining a domain.": "Establezca para permitir que Samba realice actualizaciones de DNS al unirse a un dominio.",
-  "Set to enable connecting to the VNC web interface.": "Configurado para habilitar la conexión a la interfaz web VNC.",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "Configurado para habilitar el Protocolo de intercambio de archivos. Esta opción hace que el servidor sea vulnerable a los ataques de rebote FTP, por lo que no se recomienda.",
   "Set to enable the iSCSI extent.": "Establecer para habilitar la extensión iSCSI.",
   "Set to export the certificate environment variables.": "Establecer para exportar las variables de entorno del certificado.",
@@ -4174,7 +4193,6 @@
   "Set to use encryption when replicating data. Additional encryption options will appear.": "Configúrelo para usar cifrado al replicar datos. Aparecerán opciones de cifrado adicionales.",
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "Establezca para usar el <i>Programa</i> en lugar del <i>Replicar instantáneas específicas</i>. Los valores de la programación se leen durante el marco temporal <i>Replicar instantáneas específicas</i>.",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "Se establece cuando se necesita soporte NFSv4 ACL sin requerir que el cliente y el servidor sincronicen usuarios y grupos.",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "Se establece cuando un usuario es miembro de más de 16 grupos. Esto supone que la pertenencia al grupo está configurada correctamente en el servidor NFS.",
   "Set when using Xen as the iSCSI initiator.": "Se establece cuando se usa Xen como iniciador iSCSI.",
   "Set whether processes can be executed from within this dataset.": "Establezca si los procesos se pueden ejecutar desde este conjunto de datos.",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "Establece los permisos Unix predeterminados del directorio de inicio del usuario. Esto es de solo lectura para usuarios integrados.",
@@ -4283,7 +4301,6 @@
   "Sun": "Domingo",
   "Sunday": "Domingo",
   "Support": "Soporte",
-  "Support >16 groups": "Soporte> 16 grupos",
   "Switch Train": "Cambiar de tren",
   "Switch update trains?": "¿Cambiar trenes de actualización?",
   "Sync": "Sincronizar",
@@ -4599,7 +4616,6 @@
   "Volume size cannot be zero.": "El tamaño del volumen no puede ser cero.",
   "WARNING": "ADVERTENCIA",
   "WARNING: A failover will  temporarily interrupt system services.": "ADVERTENCIA: Una conmutación por error interrumpirá temporalmente los servicios del sistema.",
-  "Wait to start VM until VNC client connects.": "Espere para iniciar VM hasta que el cliente VNC se conecte.",
   "Waiting for Active TrueNAS controller to come up...": "Esperando a que aparezca el controlador TrueNAS activo...",
   "Warning": "Advertencia",
   "Warning: iSCSI Target is already in use.</font><br>": "Advertencia: Objetivo iSCSI ya está en uso.</font><br>",
diff --git a/src/assets/i18n/es-co.json b/src/assets/i18n/es-co.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/es-co.json
+++ b/src/assets/i18n/es-co.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/es-mx.json b/src/assets/i18n/es-mx.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/es-mx.json
+++ b/src/assets/i18n/es-mx.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/es-ni.json b/src/assets/i18n/es-ni.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/es-ni.json
+++ b/src/assets/i18n/es-ni.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/es-ve.json b/src/assets/i18n/es-ve.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/es-ve.json
+++ b/src/assets/i18n/es-ve.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/es.json b/src/assets/i18n/es.json
index 31500980609..e3b1c6d5110 100644
--- a/src/assets/i18n/es.json
+++ b/src/assets/i18n/es.json
@@ -953,7 +953,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
@@ -1254,6 +1254,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
   "Enable the SNMPv3 security model.": "",
@@ -1312,7 +1313,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1333,7 +1334,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1613,6 +1614,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1792,6 +1794,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -1926,6 +1929,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2083,6 +2087,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2129,6 +2134,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2239,6 +2245,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2641,6 +2648,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3122,15 +3130,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3276,7 +3284,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3317,7 +3325,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3332,6 +3339,7 @@
   "Setting this option is discouraged as it increases security risk.": "",
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Setup Method": "",
@@ -3558,7 +3566,6 @@
   "Summary": "",
   "Sun": "",
   "Sunday": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -3865,6 +3872,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology Summary": "",
@@ -4154,7 +4162,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning!": "",
@@ -4166,6 +4174,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
   "Web Interface HTTP Port": "",
@@ -4337,6 +4346,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4378,11 +4388,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "% of all cores": "% de todos los núcleos",
diff --git a/src/assets/i18n/et.json b/src/assets/i18n/et.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/et.json
+++ b/src/assets/i18n/et.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/eu.json b/src/assets/i18n/eu.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/eu.json
+++ b/src/assets/i18n/eu.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/fa.json b/src/assets/i18n/fa.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/fa.json
+++ b/src/assets/i18n/fa.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/fi.json b/src/assets/i18n/fi.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/fi.json
+++ b/src/assets/i18n/fi.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/fr.json b/src/assets/i18n/fr.json
index 525fafd76c9..b3ff954bd19 100644
--- a/src/assets/i18n/fr.json
+++ b/src/assets/i18n/fr.json
@@ -65,6 +65,7 @@
   "Dataset Read": "",
   "Dataset Write": "",
   "Datasets": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete Cloud Backup <b>\"{name}\"</b>?": "",
   "Delete group": "",
   "Device removed": "",
@@ -80,11 +81,14 @@
   "Edit group": "",
   "Enable Kernel Debug": "",
   "Enable Learning": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enclosure Dashboard": "",
   "Enclosure Options": "",
   "Enclosure Read": "",
   "Enclosure Write": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a shell glob pattern to match files and directories to exclude from the backup.": "",
   "Enter path for {label}.{multiple}": "",
   "Enter the number of last kept backups.": "",
@@ -112,6 +116,7 @@
   "Flash Identify Light": "",
   "FreeBSD": "",
   "Full Admin": "",
+  "Generate New Password": "",
   "Global 2FA": "",
   "Global 2FA Enable": "",
   "Gmail": "",
@@ -140,6 +145,7 @@
   "IPMI Write": "",
   "IPs": "",
   "IPv4 Datapoint": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "Ignore List": "",
   "Image Name": "",
   "Image Size": "",
@@ -167,6 +173,7 @@
   "Isolated GPU PCI Ids": "",
   "JBOF Read": "",
   "JBOF Write": "",
+  "Jobs History": "",
   "KMIP": "",
   "KMIP Read": "",
   "KMIP Write": "",
@@ -186,7 +193,9 @@
   "Linux": "",
   "Local Groups Name": "",
   "Locks": "",
+  "LogOut": "",
   "Machine": "",
+  "Manage Groups Server-side": "",
   "Maximize Dispersal": "",
   "Mega": "",
   "Message": "",
@@ -202,6 +211,7 @@
   "Move widget down": "",
   "Move widget up": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "NFS Sessions": "",
   "NFSv4 DNS Domain": "",
@@ -249,6 +259,7 @@
   "Pool Scrub Write": "",
   "Pool imported successfully.": "",
   "Post Script": "",
+  "Power Menu": "",
   "Pre Script": "",
   "Privileges": "",
   "Processor": "",
@@ -323,8 +334,11 @@
   "Select Reporting": "",
   "Select a layout": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select files and directories to exclude from the backup.": "",
   "Select files and directories to include from the backup. Leave empty to include everything.": "",
   "Select paths to exclude": "",
@@ -343,6 +357,8 @@
   "Session dialect": "",
   "Set Attribute": "",
   "Set Quota": "",
+  "Set to enable connecting to the SPICE web interface.": "",
+  "Settings Menu": "",
   "Severity Level": "",
   "Sharing Admin": "",
   "Sharing NFS Read": "",
@@ -399,6 +415,7 @@
   "Terminate Other User Sessions": "",
   "Timestamp": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Total failed": "",
   "Translate App": "",
   "TrueCommand Read": "",
@@ -421,7 +438,9 @@
   "VM Serial Shell": "",
   "VM Write": "",
   "View Less": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Web Shell Access": "",
   "WebDAV": "",
   "What and When": "",
@@ -459,6 +478,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{email} via {server}": "",
   "{failedCount} of {allCount, plural, =1 {# task} other {# tasks}} failed": "",
@@ -475,10 +495,16 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "\n              It looks like your session has been inactive for more than {lifetime} seconds.<br>\n              For security reasons we will log you out at {time}.\n            ": "\n Il semble que votre session soit inactive depuis plus de {lifetime} secondes.<br>\n Pour des raisons de sécurité, nous vous déconnecterons à {time}.\n",
   " Est. Usable Raw Capacity": "Est. Capacité utile",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": " Lorsque le <b>mode UPS</b> est réglé sur <i>Esclave</i>. Entrez le numéro de port réseau ouvert du système UPS <i>Maître</i> . Le port par défaut est <i>3493</i>.",
@@ -1475,7 +1501,6 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "Définissez si le canal de contrôle, le canal de données, les deux canaux ou aucun des deux canaux d'une session FTP doit s'effectuer via SSL/TLS. Les politiques sont décrites <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">ici</a>",
   "Degraded": "Dégradé",
   "Delay Updates": "Retarder les mises à jour",
-  "Delay VM Boot Until VNC Connects": "Délai de démarrage de la VM jusqu'à ce que la VNC se connecte",
   "Delete": "Supprimer",
   "Delete <b>{deviceType} {device}</b>": "Supprimer <b>{deviceType} {device}</b>",
   "Delete API Key": "Supprimer la clé API",
@@ -1849,7 +1874,6 @@
   "Enter <strong>{pool}</strong> below to confirm": "Entrez <strong>{pool}</strong> ci-dessous pour confirmer",
   "Enter <strong>{zvolName}</strong> below to confirm.": "Entrez <strong>{zvolName}</strong> ci-dessous pour confirmer.",
   "Enter a Name (optional)": "Entrez un nom (facultatif)",
-  "Enter a VNC password to automatically pass to the VNC session.": "Entrez un mot de passe VNC pour passer automatiquement à la session VNC.",
   "Enter a description of the Cloud Sync Task.": "Entrez une description de la tâche Cloud Sync.",
   "Enter a description of the cron job.": "Entrez une description de la tâche cron.",
   "Enter a description of the interface.": "Entrez une description de l'interface.",
@@ -1869,7 +1893,6 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "Entrez le nombre de secondes d'attente avant d'avertir que le service ne peut atteindre aucun UPS. Les avertissements se poursuivent jusqu'à ce que la situation soit corrigée.",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "Entrez un résumé d'un à trois paragraphes de la question. Décrivez le problème et indiquez les étapes à suivre pour reproduire le problème.",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "Entrez un mot de passe pour l'utilisateur du <i>rancher</i>. Ceci est utilisé pour se connecter à la VM à partir de l'interpréteur de commandes série.",
-  "Enter a password for the VNC display.": "Entrez un mot de passe pour l'affichage VNC.",
   "Enter a password of at least eight characters.": "Entrez un mot de passe d'au moins huit caractères.",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "Entrez un port pour lier <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "Entrez un port pour lier <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a> .",
@@ -3499,13 +3522,10 @@
   "Select a schedule preset or choose <i>Custom</i>  to open the advanced scheduler. Note that an in-progress cron task postpones  any later scheduled instance of the same task until the running task is  complete.": "Sélectionnez un horaire prédéfini ou choisissez <i>Custom</i> pour ouvrir le programmateur avancé. Notez qu'une tâche cron en cours reporte toute instance programmée ultérieurement de la même tâche jusqu'à ce que la tâche en cours soit terminée.",
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "Sélectionnez un préréglage de planification ou choisissez <i>Personnaliser</i> pour ouvrir le planificateur avancé.",
   "Select a schema when Samba Schema is set.": "Sélectionnez un schéma lorsque le schéma Samba est défini.",
-  "Select a screen resolution to use for VNC sessions.": "Sélectionnez une résolution d'écran à utiliser pour les sessions VNC.",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "Sélectionnez une taille de secteur en octets. <i>Par défaut</i>, la taille du secteur n'est pas définie et utilise les valeurs de volume ZFS. La définition d'une taille de secteur modifie la taille des secteurs logique et physique.",
   "Select a time zone.": "Sélectionnez un fuseau horaire.",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "Sélectionnez un compte utilisateur pour exécuter la commande. L'utilisateur doit avoir les autorisations lui permettant d'exécuter la commande ou le script.",
   "Select action": "Sélectionnez l'action",
-  "Select an IP address to use for VNC sessions.": "Sélectionnez une adresse IP à utiliser pour les sessions VNC.",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "Sélectionnez une adresse IP à utiliser pour les sessions VNC distantes. Remarque : ce paramètre s'applique uniquement si vous utilisez un client VNC autre que TrueNAS WebUI.",
   "Select an existing CSR.": "Sélectionner une demande de certificat existante.",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "Sélectionnez une connexion SSH existante vers un système distant ou choisissez <i>Créer nouveau</i> pour créer une nouvelle connexion SSH.",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "Sélectionnez une connexion SSH existante à un système distant ou choisissez Créer nouveau pour créer une nouvelle connexion SSH.",
@@ -3637,7 +3657,6 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "Configuré pour démarrer cette tâche de réplication immédiatement après la fin de la tâche d'instantané périodique liée ou pour continuer à créer un <b>calendrier</b> séparé pour cette réplication.",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "Réglé pour activer DHCP. Laisser libre pour créer une configuration IPv4 ou IPv6 statique. Une seule interface peut être configurée pour DHCP.",
   "Set to enable Samba to do DNS updates when joining a domain.": "Configuré pour permettre à Samba de faire des mises à jour DNS lorsqu'il rejoint un domaine.",
-  "Set to enable connecting to the VNC web interface.": "Réglé pour activer la connexion à l'interface web VNC.",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "Réglé pour activer le protocole d'échange de fichiers. Cette option rend le serveur vulnérable aux attaques de rebond FTP et n'est donc pas recommandée.",
   "Set to enable the iSCSI extent.": "Réglé pour activer l'étendue iSCSI.",
   "Set to export the certificate environment variables.": "Défini pour exporter les variables d'environnement du certificat.",
@@ -3679,7 +3698,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "Utiliser le <i>calendrier</i> à la place du délai de <i>reproduction des clichés spécifiques</i>. Les valeurs de l'horaire sont lues par-dessus la période de reproduction des <i>instantanés</i> spécifiques.",
   "Set up TrueNAS authentication method:": "Configurer la méthode d'authentification TrueNAS :",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "Définit quand le support ACL NFSv4 est nécessaire sans que le client et le serveur aient besoin de synchroniser les utilisateurs et les groupes.",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "Définit lorsqu'un utilisateur est membre de plus de 16 groupes. Cela suppose que l'appartenance à un groupe est correctement configurée sur le serveur NFS.",
   "Set when using Xen as the iSCSI initiator.": "Réglé lorsque vous utilisez Xen comme initiateur iSCSI.",
   "Set whether processes can be executed from within this dataset.": "Définit si les processus peuvent être exécutés à partir de ce dataset.",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "Définit les autorisations Unix par défaut du répertoire home de l'utilisateur. Ceci est en lecture seule pour les utilisateurs intégrés.",
@@ -3888,7 +3906,6 @@
   "Sun": "Dim",
   "Sunday": "Dimanche",
   "Support": "Support",
-  "Support >16 groups": "Support >16 groupes",
   "Swap Size": "Taille de swap",
   "Switch To Advanced": "Basculer sur Avnacé",
   "Switch To Basic": "Basculé sur Basique",
@@ -4490,7 +4507,6 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "AVERTISSEMENT : les clés de tous les datasets imbriqués avec chiffrement appliqué seront téléchargées.",
   "WARNING: Only the key for the dataset in question will be downloaded.": "AVERTISSEMENT : Seule la clé du dataset en question sera téléchargée.",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "AVERTISSEMENT : Ces processus inconnus seront terminés lors de l'exportation du volume.",
-  "Wait to start VM until VNC client connects.": "Attendez de démarrer VM jusqu'à ce que le client VNC se connecte.",
   "Waiting": "En attente",
   "Waiting for Active TrueNAS controller to come up...": "En attendant que le contrôleur Active TrueNAS apparaisse.....",
   "Warning": "Attention",
diff --git a/src/assets/i18n/fy.json b/src/assets/i18n/fy.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/fy.json
+++ b/src/assets/i18n/fy.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ga.json b/src/assets/i18n/ga.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ga.json
+++ b/src/assets/i18n/ga.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/gd.json b/src/assets/i18n/gd.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/gd.json
+++ b/src/assets/i18n/gd.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/gl.json b/src/assets/i18n/gl.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/gl.json
+++ b/src/assets/i18n/gl.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/he.json b/src/assets/i18n/he.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/he.json
+++ b/src/assets/i18n/he.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/hi.json b/src/assets/i18n/hi.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/hi.json
+++ b/src/assets/i18n/hi.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/hr.json b/src/assets/i18n/hr.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/hr.json
+++ b/src/assets/i18n/hr.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/hsb.json b/src/assets/i18n/hsb.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/hsb.json
+++ b/src/assets/i18n/hsb.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/hu.json b/src/assets/i18n/hu.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/hu.json
+++ b/src/assets/i18n/hu.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ia.json b/src/assets/i18n/ia.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ia.json
+++ b/src/assets/i18n/ia.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/id.json b/src/assets/i18n/id.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/id.json
+++ b/src/assets/i18n/id.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/io.json b/src/assets/i18n/io.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/io.json
+++ b/src/assets/i18n/io.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/is.json b/src/assets/i18n/is.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/is.json
+++ b/src/assets/i18n/is.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/it.json b/src/assets/i18n/it.json
index 40ae0b99ef1..e886dbfb600 100644
--- a/src/assets/i18n/it.json
+++ b/src/assets/i18n/it.json
@@ -892,7 +892,7 @@
   "Define the target as *iSCSI*, *Fibre Channel*, or *Both*.": "",
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
@@ -1174,6 +1174,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the SNMPv3 security model.": "",
   "Enable this Cloud Sync Task. Unset to disable this Cloud Sync Task without deleting it.": "",
@@ -1227,7 +1228,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1248,7 +1249,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1537,6 +1538,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1726,6 +1728,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -1861,6 +1864,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2020,6 +2024,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2066,6 +2071,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2186,6 +2192,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2608,6 +2615,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3107,15 +3115,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3265,7 +3273,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3306,7 +3314,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3322,6 +3329,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3556,7 +3564,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -3868,6 +3875,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4183,7 +4191,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4196,6 +4204,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4374,6 +4383,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4415,11 +4425,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "20 characters is the maximum length.": "20 caratteri è la lunghezza massima.",
diff --git a/src/assets/i18n/ja.json b/src/assets/i18n/ja.json
index 71c2eda05a9..4fb314a5c68 100644
--- a/src/assets/i18n/ja.json
+++ b/src/assets/i18n/ja.json
@@ -839,7 +839,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
@@ -1137,6 +1137,7 @@
   "Enable for TrueNAS to periodically review data blocks and identify empty blocks, or obsolete blocks that can be deleted. Unset to use dirty block overwrites (default).": "",
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the SNMPv3 security model.": "",
@@ -1190,7 +1191,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a list of allowed hostnames or IP addresses.    Separate entries by pressing <code>Enter</code>. A more detailed description     with examples can be found     <a href=\"{url}\" target=\"_blank\">here</a>. <br><br>     If neither *Hosts Allow* or *Hosts Deny* contains     an entry, then SMB share access is allowed for any host. <br><br>     If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow     hosts on the *Hosts Allow* list. <br><br>     If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all     hosts that are not on the *Hosts Deny* list. <br><br>     If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts     that are on the *Hosts Allow* list. <br><br>     If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list,     then allow it.": "",
@@ -1201,7 +1202,7 @@
   "Enter a number of degrees in Celsius. S.M.A.R.T. reports if the temperature of a drive has changed by N degrees Celsius since the last report.": "",
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/statd.8.html\" target=\"_blank\">rpc.statd(8)</a>.": "",
@@ -1446,6 +1447,7 @@
   "Generate Encryption Key": "",
   "Generate Key": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1621,6 +1623,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -1751,6 +1754,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -1906,6 +1910,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -1949,6 +1954,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2066,6 +2072,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2449,6 +2456,7 @@
   "Post Script": "",
   "Post-script": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -2889,13 +2897,13 @@
   "Select a schedule preset or choose <i>Custom</i>  to open the advanced scheduler. Note that an in-progress cron task postpones  any later scheduled instance of the same task until the running task is  complete.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3029,7 +3037,7 @@
   "Set to display image upload options.": "",
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3058,7 +3066,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default permissions for newly created directories.": "",
@@ -3072,6 +3079,7 @@
   "Setting this option is discouraged as it increases security risk.": "",
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
+  "Settings Menu": "",
   "Settings saved": "",
   "Setup Method": "",
   "Setup Pool To Create Custom App": "",
@@ -3281,7 +3289,6 @@
   "Summary": "",
   "Sun": "",
   "Sunday": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -3566,6 +3573,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Topology": "",
   "Topology Summary": "",
   "Total": "",
@@ -3857,6 +3865,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning!": "",
@@ -3868,6 +3877,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4039,6 +4049,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4080,11 +4091,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": "<b>UPSモード</b>が<i>スレーブ</i>に設定されている場合。UPS<i>マスター</i>システムの開いているネットワークポート番号を入力します。デフォルトのポートは<i>3493</i>です。",
@@ -4662,7 +4679,6 @@
   "VM system time. Default is <i>Local</i>.": "仮想マシンのシステム時間。 デフォルトは<i>Local</i>です。",
   "Verify Credential": "認証情報を検証",
   "Version": "バージョン",
-  "Wait to start VM until VNC client connects.": "VNCクライアントが接続するまで仮想マシンを起動するのを待ちます。",
   "Warning": "警告",
   "Wipe": "消去",
   "Wipe this disk?": "このディスクを消去しますか？",
diff --git a/src/assets/i18n/ka.json b/src/assets/i18n/ka.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ka.json
+++ b/src/assets/i18n/ka.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/kk.json b/src/assets/i18n/kk.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/kk.json
+++ b/src/assets/i18n/kk.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/km.json b/src/assets/i18n/km.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/km.json
+++ b/src/assets/i18n/km.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/kn.json b/src/assets/i18n/kn.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/kn.json
+++ b/src/assets/i18n/kn.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ko.json b/src/assets/i18n/ko.json
index 7d80e5e29d0..1845557efe9 100644
--- a/src/assets/i18n/ko.json
+++ b/src/assets/i18n/ko.json
@@ -557,7 +557,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -888,6 +888,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -948,7 +949,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -969,7 +970,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1258,6 +1259,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1447,6 +1449,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -1582,6 +1585,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -1741,6 +1745,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -1787,6 +1792,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -1907,6 +1913,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2329,6 +2336,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -2828,15 +2836,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -2986,7 +2994,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3027,7 +3035,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3043,6 +3050,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3277,7 +3285,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -3589,6 +3596,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -3904,7 +3912,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -3917,6 +3925,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4095,6 +4104,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4136,11 +4146,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   " Est. Usable Raw Capacity": " 예상 사용 가능 용량",
diff --git a/src/assets/i18n/lb.json b/src/assets/i18n/lb.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/lb.json
+++ b/src/assets/i18n/lb.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/lt.json b/src/assets/i18n/lt.json
index f8dde69fd3c..567e9aa9c83 100644
--- a/src/assets/i18n/lt.json
+++ b/src/assets/i18n/lt.json
@@ -1046,7 +1046,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1377,6 +1377,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1437,7 +1438,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1458,7 +1459,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1747,6 +1748,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1936,6 +1938,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2071,6 +2074,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2230,6 +2234,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2276,6 +2281,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2396,6 +2402,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2818,6 +2825,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3317,15 +3325,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3475,7 +3483,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3516,7 +3524,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3532,6 +3539,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3766,7 +3774,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4078,6 +4085,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4390,7 +4398,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4403,6 +4411,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4571,6 +4580,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4612,11 +4622,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": " Quando la <b>UPS Mode</b> è impostata su <i>slave</i>. Inserisci il numero della porta aperta del sistema UPS <i>Master</i>. La porta di default è <i>3493</i>.",
diff --git a/src/assets/i18n/lv.json b/src/assets/i18n/lv.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/lv.json
+++ b/src/assets/i18n/lv.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/mk.json b/src/assets/i18n/mk.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/mk.json
+++ b/src/assets/i18n/mk.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ml.json b/src/assets/i18n/ml.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ml.json
+++ b/src/assets/i18n/ml.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/mn.json b/src/assets/i18n/mn.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/mn.json
+++ b/src/assets/i18n/mn.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/mr.json b/src/assets/i18n/mr.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/mr.json
+++ b/src/assets/i18n/mr.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/my.json b/src/assets/i18n/my.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/my.json
+++ b/src/assets/i18n/my.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/nb.json b/src/assets/i18n/nb.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/nb.json
+++ b/src/assets/i18n/nb.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ne.json b/src/assets/i18n/ne.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ne.json
+++ b/src/assets/i18n/ne.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/nl.json b/src/assets/i18n/nl.json
index 406d815542c..39464f3da38 100644
--- a/src/assets/i18n/nl.json
+++ b/src/assets/i18n/nl.json
@@ -32,6 +32,7 @@
   "Custom schedule": "",
   "DS Groups Name": "",
   "Dashboard (old)": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
   "Delete Cloud Backup <b>\"{name}\"</b>?": "",
   "Delete group": "",
@@ -43,9 +44,12 @@
   "Edit group": "",
   "Enable Kernel Debug": "",
   "Enable Learning": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enclosure Dashboard": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a list of chat IDs separated by space, comma or semicolon.  To find your chat ID send a message to the bot, group or channel and visit  <a href=\"https://api.telegram.org/bot(BOT_TOKEN)/getUpdates\"  target=\"_blank\">https://api.telegram.org/bot(BOT_TOKEN)/getUpdates</a>.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a shell glob pattern to match files and directories to exclude from the backup.": "",
   "Enter the number of last kept backups.": "",
   "Eula": "",
@@ -54,12 +58,14 @@
   "FIPS Settings": "",
   "Failover Now": "",
   "Failover is recommended for new FIPS setting to take effect. Would you like to failover now?": "",
+  "Generate New Password": "",
   "Global 2FA Enable": "",
   "Gmail": "",
   "Go back": "",
   "IP of 1st Redfish management interface.": "",
   "IPs": "",
   "IPv4 Datapoint": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "Include everything": "",
   "Include from subfolder": "",
   "Include or exclude files and directories from the backup.": "",
@@ -67,13 +73,17 @@
   "Included Paths": "",
   "Input the name of container to use.": "",
   "Ipmi": "",
+  "Jobs History": "",
   "Keep Last": "",
   "Kerberos Keytabs": "",
   "Layouts": "",
   "Local Groups Name": "",
+  "LogOut": "",
+  "Manage Groups Server-side": "",
   "Managed by TrueCommand": "",
   "Move widget down": "",
   "Move widget up": "",
+  "Multiple Errors": "",
   "NTP Server": "",
   "NVMe-oF Expansion Shelves": "",
   "Name ^ \"Local\" AND \"Web Shell Access\" = true": "",
@@ -92,6 +102,7 @@
   "Permissions saved.": "",
   "Pool imported successfully.": "",
   "Post Script": "",
+  "Power Menu": "",
   "Pre Script": "",
   "Processor": "",
   "Reboot of the other node is required for FIPS changes.": "",
@@ -117,9 +128,11 @@
   "Select Reporting": "",
   "Select a layout": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select files and directories to exclude from the backup.": "",
   "Select files and directories to include from the backup. Leave empty to include everything.": "",
   "Select paths to exclude": "",
@@ -129,6 +142,8 @@
   "Send Method": "",
   "Service Name": "",
   "Session Token Lifetime": "",
+  "Set to enable connecting to the SPICE web interface.": "",
+  "Settings Menu": "",
   "Show Logs": "",
   "Slot {n}": "",
   "Snapshot Time {time}": "",
@@ -143,19 +158,29 @@
   "This action will set all dataset quotas for the removed or invalid groups to 0, virtually removing any dataset quota entires for such groups. Are you sure you want to proceed?": "",
   "This action will set all dataset quotas for the removed or invalid users to 0, virtually removing any dataset quota entires for such users. Are you sure you want to proceed?": "",
   "Toggle off to defer interface learning until runtime, preventing premature state transitions and potential issues during system startup.": "",
+  "Toolbar": "",
   "Translate App": "",
   "TrueCloud Backup Tasks": "",
   "UI": "",
   "View Less": "",
+  "Wait to start VM until SPICE client connects.": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Widget Editor": "",
   "Widgets": "",
   "Widgets ({n, plural, =1 {# item} other {# items}})": "",
   "You can search both for local groups as well as groups from Active Directory. Press ENTER to separate entries.": "",
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{n, plural, =0 {No errors} one {# Error} other {# Errors}}": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "\n              It looks like your session has been inactive for more than {lifetime} seconds.<br>\n              For security reasons we will log you out at {time}.\n            ": "\n              Het lijkt erop dat uw sessie langer dan {lifetime} seconden inactief is geweest.<br>\n              Om veiligheidsredenen loggen we u om {time} uit.\n            ",
   " Est. Usable Raw Capacity": "Geschatte bruikbare capaciteit",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": "Wanneer de <b>UPS-modus</b> is ingesteld op <i>slave</i>. Het open netwerkpoortnummer van het UPS <i>Master</i>-systeem invoeren. De standaardpoort is <i>3493</i>.",
@@ -1185,7 +1210,6 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "Definieer of het besturingskanaal, het gegevenskanaal, beide kanalen of geen van beide kanalen van een FTP-sessie via SSL/TLS moet plaatsvinden. Het beleid wordt <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">hier</a> beschreven",
   "Degraded": "Gedegradeerd",
   "Delay Updates": "Updates vertragen",
-  "Delay VM Boot Until VNC Connects": "VM booten uitstellen totdat VNC verbinding maakt",
   "Delete": "Verwijderen",
   "Delete <b>{deviceType} {device}</b>": "<b>{deviceType} {device}</b> verwijderen",
   "Delete API Key": "API sleutel verwijderen",
@@ -1566,7 +1590,6 @@
   "Enter <strong>{pool}</strong> below to confirm": "Hieronder <strong>{pool}</strong> invoeren om te bevestigen",
   "Enter <strong>{zvolName}</strong> below to confirm.": "Hieronder <strong>{zvolName}</strong> invoeren om te bevestigen.",
   "Enter a Name (optional)": "Een naam (optioneel) invoeren",
-  "Enter a VNC password to automatically pass to the VNC session.": "Een VNC-wachtwoord invoeren dat automatisch wordt doorgegeven aan de VNC-sessie.",
   "Enter a description of the Cloud Sync Task.": "Een beschrijving invoeren van de cloudsynchronisatietaak.",
   "Enter a description of the cron job.": "Een beschrijving invoeren van de cron-job.",
   "Enter a description of the interface.": "Een beschrijving invoeren van de interface.",
@@ -1585,7 +1608,6 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "Een aantal seconden invoeren om te wachten wordt gewaarschuwd dat de service geen enkele UPS kan bereiken. Waarschuwingen gaan door totdat de situatie is verholpen.",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "Een samenvatting van één tot drie alinea's van het probleem invoeren. Het probleem beschrijven en eventuele stappen geven om het probleem te repliceren.",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "Een wachtwoord invoeren voor de <i>rancher</i>-gebruiker. Dit wordt gebruikt om in te loggen op de VM vanuit de seriële shell.",
-  "Enter a password for the VNC display.": "Een wachtwoord invoeren voor het VNC-display.",
   "Enter a password of at least eight characters.": "Een wachtwoord van minimaal acht tekens invoeren.",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "Een poort invoeren om <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a> te binden.",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "Een poort invoeren om <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a> te binden.",
@@ -3382,12 +3404,10 @@
   "Select a schedule preset or choose <i>Custom</i>  to open the advanced scheduler. Note that an in-progress cron task postpones  any later scheduled instance of the same task until the running task is  complete.": "Een vooraf ingestelde planning of <i>Aangepast</i> kiezen om de geavanceerde planner te openen. <br>Houd er rekening mee dat een lopende cron-taak een later gepland exemplaar van dezelfde taak uitstelt totdat de actieve taak is voltooid.",
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "Een vooraf ingestelde planning of <i>Aangepast</i> selecteren om de geavanceerde planner te openen.",
   "Select a schema when Samba Schema is set.": "Een schema selecteren wanneer Samba Schema is ingesteld.",
-  "Select a screen resolution to use for VNC sessions.": "Een schermresolutie selecteren om te gebruiken voor VNC-sessies.",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "Een sectorgrootte in bytes selecteren. <i>Standaard</i> is de sectorgrootte niet ingesteld en gebruikt het de ZFS-volumewaarden. Als je een sectorgrootte instelt, verandert zowel de logische als de fysieke sectorgrootte.",
   "Select a time zone.": "Een tijdzone selecteren.",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "Een gebruikersaccount selecteren om de opdracht uit te voeren. <br>De gebruiker moet machtigingen hebben om de opdracht of het script uit te voeren.",
   "Select action": "Actie selecteren",
-  "Select an IP address to use for VNC sessions.": "Een IP-adres selecteren om te gebruiken voor VNC-sessies.",
   "Select an existing CSR.": "Een bestaande CSR selecteren.",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "Een bestaande SSH-verbinding met een extern systeem selecteren of <i>Nieuw aanmaken</i> selecteren om een nieuwe SSH-verbinding aan te maken.",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "Een bestaande SSH-verbinding selecteren met een extern systeem of Nieuw aanmaken selecteren om een nieuwe SSH-verbinding aan te maken.",
@@ -3528,7 +3548,6 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "Aanvinken om deze replicatietaak onmiddellijk te starten nadat de gekoppelde periodieke momentopnametaak is voltooid, of doorgaan met het maken van een afzonderlijk <b>schema</b> voor deze replicatie.",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "Aanvinken om DHCP in te schakelen.<br>Uitvinken om een statische IPv4- of IPv6-configuratie te maken.<br><br>Er kan slechts één interface voor DHCP worden geconfigureerd.",
   "Set to enable Samba to do DNS updates when joining a domain.": "Aanvinken om Samba in staat te stellen DNS-updates uit te voeren wanneer je lid wordt van een domein.",
-  "Set to enable connecting to the VNC web interface.": "Aanvinken om verbinding met de VNC-webinterface mogelijk te maken.",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "Aanvinken om het File eXchange-protocol in te schakelen. Deze optie maakt de server kwetsbaar voor FTP-bounce-aanvallen dus het wordt niet aanbevolen.",
   "Set to enable the iSCSI extent.": "Aanvinken om het iSCSI-bereik in te schakelen.",
   "Set to export the certificate environment variables.": "Aanvinken om de certificaatomgevingsvariabelen te exporteren.",
@@ -3570,7 +3589,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "<br>Aanvinken om de <i>Planning</i> te gebruiken in plaats van het tijdsbestek <i>Specifieke momentopnamen repliceren</i>. De planningswaarden worden gelezen over het tijdsbestek <i>Specifieke momentopnamen repliceren</i>.",
   "Set up TrueNAS authentication method:": "TrueNAS authenticatiemethode instellen:",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "Aanvinken wanneer ondersteuning NFSv4 Toegangsbeheerlijst nodig is zonder dat de client en de server gebruikers en groepen hoeven te synchroniseren.",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "Aanvinken wanneer een gebruiker lid is van meer dan 16 groepen. Dit veronderstelt dat het groepslidmaatschap correct is geconfigureerd op de NFS-server.",
   "Set when using Xen as the iSCSI initiator.": "Aanvinken bij gebruik van Xen als iSCSI-initiator.",
   "Set whether processes can be executed from within this dataset.": "Aanvinken of processen vanuit deze dataset kunnen worden uitgevoerd.",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "Standaard Unix-machtigingen voor de home-map van de gebruiker instellen. Dit is alleen-lezen voor ingebouwde gebruikers.",
@@ -3817,7 +3835,6 @@
   "Sun": "zon",
   "Sunday": "zondag",
   "Support": "Ondersteuning",
-  "Support >16 groups": "Méér dan 16 groepen ondersteunen",
   "Support Read": "Ondersteuning Lezen",
   "Support Write": "Ondersteuning Schrijven",
   "Swap Size": "Swapgrootte",
@@ -4441,7 +4458,6 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "WAARSCHUWING: Sleutels voor alle geneste datasets waarop codering is toegepast, worden gedownload.",
   "WARNING: Only the key for the dataset in question will be downloaded.": "WAARSCHUWING: Alleen de sleutel voor de betreffende dataset wordt gedownload.",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "WAARSCHUWING: Deze onbekende processen worden beëindigd tijdens het exporteren van de pool.",
-  "Wait to start VM until VNC client connects.": "Wacht met VM te starten totdat de VNC-client verbinding maakt.",
   "Waiting": "Aan het wachten",
   "Waiting for Active TrueNAS controller to come up...": "Wacht op het TrueNAS inlogscherm...",
   "Warning": "Waarschuwing",
diff --git a/src/assets/i18n/nn.json b/src/assets/i18n/nn.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/nn.json
+++ b/src/assets/i18n/nn.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/os.json b/src/assets/i18n/os.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/os.json
+++ b/src/assets/i18n/os.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/pa.json b/src/assets/i18n/pa.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/pa.json
+++ b/src/assets/i18n/pa.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/pl.json b/src/assets/i18n/pl.json
index 0ee0646ba2f..dff9fe06d28 100644
--- a/src/assets/i18n/pl.json
+++ b/src/assets/i18n/pl.json
@@ -992,7 +992,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1322,6 +1322,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1382,7 +1383,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1403,7 +1404,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1692,6 +1693,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1880,6 +1882,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2015,6 +2018,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2174,6 +2178,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2220,6 +2225,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2340,6 +2346,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2760,6 +2767,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3237,15 +3245,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3394,7 +3402,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3435,7 +3443,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3451,6 +3458,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3685,7 +3693,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -3997,6 +4004,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4312,7 +4320,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4325,6 +4333,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4499,6 +4508,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4540,11 +4550,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   " seconds.": " sekund",
diff --git a/src/assets/i18n/pt-br.json b/src/assets/i18n/pt-br.json
index 974f757b06e..321502f1987 100644
--- a/src/assets/i18n/pt-br.json
+++ b/src/assets/i18n/pt-br.json
@@ -989,7 +989,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1320,6 +1320,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1380,7 +1381,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1401,7 +1402,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1690,6 +1691,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1879,6 +1881,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2013,6 +2016,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2172,6 +2176,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2218,6 +2223,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2338,6 +2344,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2760,6 +2767,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3259,15 +3267,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3417,7 +3425,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3458,7 +3466,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3474,6 +3481,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3708,7 +3716,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4020,6 +4027,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4335,7 +4343,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4348,6 +4356,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4526,6 +4535,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4567,11 +4577,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": " Quando o <b>Modo UPS</b> é configurado para <i>slave</i>. Insira o número da porta aberta do Sistema UPS <i>Mestre</i> . A porta padrão é <i>3493</i>.",
diff --git a/src/assets/i18n/pt.json b/src/assets/i18n/pt.json
index ed845243f10..a1af91268a2 100644
--- a/src/assets/i18n/pt.json
+++ b/src/assets/i18n/pt.json
@@ -366,6 +366,7 @@
   "Define the system services that are allowed to communicate externally. All other external traffic is restricted.": "",
   "Define the target as *iSCSI*, *Fibre Channel*, or *Both*.": "",
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
   "Delete Catalog": "",
   "Delete Certificate Authority": "",
@@ -530,6 +531,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -587,7 +589,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -608,7 +610,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -814,6 +816,7 @@
   "GUI Settings": "",
   "Generate Debug File": "",
   "Generate Encryption Key": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -933,6 +936,7 @@
   "Identify this extension as critical for the certificate. Critical extensions must be recognized by the certificate-using system or this certificate will be rejected. Extensions identified as <i>not</i> critical can be ignored by the certificate-using system and the certificate still approved.": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -1017,6 +1021,7 @@
   "Item": "",
   "JBOF Read": "",
   "JBOF Write": "",
+  "Jobs History": "",
   "KDC": "",
   "KMIP": "",
   "KMIP Key Status": "",
@@ -1117,6 +1122,7 @@
   "Log In To Provider": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -1138,6 +1144,7 @@
   "Major": "",
   "Make Destination Dataset Read-only?": "",
   "Make the currently active TrueNAS controller the default when both TrueNAS controllers are online and HA is enabled. To change the default TrueNAS controller, unset this option on the default TrueNAS controller and allow the system to fail over. This briefly interrupts system services.": "",
+  "Manage Groups Server-side": "",
   "Manage VM Settings": "",
   "Managed by TrueCommand": "",
   "Manual disk selection allows you to create VDEVs and add disks to those VDEVs individually.": "",
@@ -1198,6 +1205,7 @@
   "Move widget up": "",
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
+  "Multiple Errors": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
   "Mutual secret password. Required when Peer User is set. Must be different than the <i>Secret</i>.": "",
@@ -1452,6 +1460,7 @@
   "Post Script": "",
   "Post-script": "",
   "Power Management": "",
+  "Power Menu": "",
   "Pre Init": "",
   "Pre Script": "",
   "Pre-script": "",
@@ -1754,12 +1763,12 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -1873,7 +1882,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -1914,7 +1923,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -1929,6 +1937,7 @@
   "Setting this option is discouraged as it increases security risk.": "",
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Severity Level": "",
   "Share ACL for {share}": "",
@@ -2054,7 +2063,6 @@
   "Subnet mask of the IPv4 address.": "",
   "Sudo Enabled": "",
   "Suggest an improvement": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -2310,6 +2318,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology Summary": "",
@@ -2499,7 +2508,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning: Debugs may contain log files with personal information such as usernames or other identifying information about your system. Please review debugs and redact any sensitive information before sharing with external entities.": "",
   "Warning: iSCSI Target is already in use.</font><br>": "",
@@ -2507,6 +2516,7 @@
   "Warning: {n} of {total} docker images could not be deleted.": "",
   "Warning: {n} of {total} docker images could not be updated.": "",
   "Warning: {n} of {total} snapshots could not be deleted.": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "WebDAV": "",
   "WebDAV Service": "",
   "WebDAV account password.": "",
@@ -2602,6 +2612,7 @@
   "{checked} exporter: {name}": "",
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{n, plural, =0 {No errors} one {# Error} other {# Errors}}": "",
   "{n, plural, one {# docker image} other {# docker images}} has been deleted.": "",
   "{n, plural, one {# docker image} other {# docker images}} has been updated.": "",
@@ -2609,9 +2620,15 @@
   "{n} RPM": "",
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   " as of {dateTime}": " a partir de {dateTime}",
   " cores at ": " núcleos em ",
   " seconds.": " segundos",
@@ -3307,7 +3324,6 @@
   "Default TrueNAS controller": "Controlador TrueNAS predefinido",
   "Degraded": "Degradado",
   "Delay Updates": "Atualizações atrasadas",
-  "Delay VM Boot Until VNC Connects": "Atrasar o início da VM até que o VNC se ligue",
   "Delete": "Eliminar",
   "Delete <b>{deviceType} {device}</b>": "Eliminar <b>{deviceType} {device}</b>",
   "Delete API Key": "Eliminar chave API",
diff --git a/src/assets/i18n/ro.json b/src/assets/i18n/ro.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ro.json
+++ b/src/assets/i18n/ro.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ru.json b/src/assets/i18n/ru.json
index 0228f4b7c5b..00437dd912f 100644
--- a/src/assets/i18n/ru.json
+++ b/src/assets/i18n/ru.json
@@ -519,6 +519,7 @@
   "Define the system services that are allowed to communicate externally. All other external traffic is restricted.": "",
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
@@ -706,6 +707,7 @@
   "Enable a Display (Virtual Network Computing) remote connection. Requires <i>UEFI</i> booting.": "",
   "Enable for TrueNAS to periodically review data blocks and identify empty blocks, or obsolete blocks that can be deleted. Unset to use dirty block overwrites (default).": "",
   "Enable passwordless sudo for zfs commands": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable this SMB share. Unset to disable this SMB share without deleting it.": "",
   "Enable/Disable STP on the bridge interfaces configurable.": "",
@@ -731,13 +733,14 @@
   "Ensure valid entries exist in  <b>Directory Services > Kerberos Realms</b> and  <b>Directory Services > Kerberos Keytabs</b> and the system  can communicate with the Kerberos Domain Controller before  enabling this option.": "",
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a list of allowed hostnames or IP addresses.    Separate entries by pressing <code>Enter</code>. A more detailed description     with examples can be found     <a href=\"{url}\" target=\"_blank\">here</a>. <br><br>     If neither *Hosts Allow* or *Hosts Deny* contains     an entry, then SMB share access is allowed for any host. <br><br>     If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow     hosts on the *Hosts Allow* list. <br><br>     If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all     hosts that are not on the *Hosts Deny* list. <br><br>     If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts     that are on the *Hosts Allow* list. <br><br>     If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list,     then allow it.": "",
   "Enter a list of chat IDs separated by space, comma or semicolon.  To find your chat ID send a message to the bot, group or channel and visit  <a href=\"https://api.telegram.org/bot(BOT_TOKEN)/getUpdates\"  target=\"_blank\">https://api.telegram.org/bot(BOT_TOKEN)/getUpdates</a>.": "",
   "Enter a list of denied hostnames or IP addresses. Separate entries by pressing <code>Enter</code>.  If neither *Hosts Allow* or *Hosts Deny* contains  an entry, then SMB share access is allowed for any host. <br><br>  If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow  hosts on the *Hosts Allow* list. <br><br>  If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all  hosts that are not on the *Hosts Deny* list. <br><br>  If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts  that are on the *Hosts Allow* list. <br><br>  If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list,  then allow it.": "",
   "Enter a name for the interface. Use the format <samp>bond<i>X</i></samp>, <samp>vlan<i>X</i></samp>, or <samp>br<i>X</i></samp> where <i>X</i> is a number representing a non-parent interface. Read-only when editing an interface.": "",
   "Enter a number of degrees in Celsius. S.M.A.R.T. reports if the temperature of a drive has changed by N degrees Celsius since the last report.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/statd.8.html\" target=\"_blank\">rpc.statd(8)</a>.": "",
@@ -862,6 +865,7 @@
   "General Info": "",
   "Generate": "",
   "Generate Encryption Key": "",
+  "Generate New Password": "",
   "Generic": "",
   "Generic dataset suitable for any share type.": "",
   "Get Support": "",
@@ -947,6 +951,7 @@
   "Identify the purpose for this public key. Typically used for end entity certificates. Multiple usages can be selected. Do not mark this extension critical when the <i>Usage</i> is <i>ANY_EXTENDED_KEY_USAGE</i>.<br><br> Using both <b>Extended Key Usage</b> and <b>Key Usage</b> extensions requires that the purpose of the certificate is consistent with both extensions. See <a href=\"https://www.ietf.org/rfc/rfc3280.txt\" target=\"_blank\">RFC 3280, section 4.2.1.13</a> for more details.": "",
   "Idle": "",
   "Idmap": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If set, the value will be used to override the default DNS domain name for NFSv4. Specifies the \"Domain\" idmapd.conf setting.": "",
@@ -1024,6 +1029,7 @@
   "JBOF Write": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "KDC": "",
   "KMIP": "",
   "KMIP Read": "",
@@ -1112,6 +1118,7 @@
   "Log In To Provider": "",
   "Log Path": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -1139,6 +1146,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -1217,6 +1225,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
   "N/A": "",
@@ -1501,6 +1510,7 @@
   "Post Script": "",
   "Post-script": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Pre Init": "",
   "Pre Script": "",
@@ -1815,11 +1825,13 @@
   "Select a previously imported or created CA.": "",
   "Select a schedule preset or choose <i>Custom</i>  to open the advanced scheduler. Note that an in-progress cron task postpones  any later scheduled instance of the same task until the running task is  complete.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select action": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
   "Select an existing realm that was added  in <b>Directory Services > Kerberos Realms</b>.": "",
@@ -1887,6 +1899,7 @@
   "Set to allow group to be used for Samba permissions and authentication.": "",
   "Set to allow user to authenticate to Samba shares.": "",
   "Set to automatically configure the IPv6. Only one interface can be configured this way.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to ignore mapping requests for the <i>BUILTIN</i>  domain.": "",
   "Set to ignore the Virtual  Machine status during the delete operation. Unset to prevent deleting  the Virtual Machine when it is still active or has an undefined state.": "",
@@ -1902,6 +1915,7 @@
   "Set to use encryption when replicating data. Additional encryption options will appear.": "",
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Setting this option changes the destination dataset to be read-only. To continue using the default or existing dataset read permissions, leave this option unset.": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Setup Pool To Create Custom App": "",
@@ -2264,6 +2278,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Topology Summary": "",
   "Total failed": "",
   "Train: {train}": "",
@@ -2458,6 +2473,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Warning!": "",
   "Warning: Debugs may contain log files with personal information such as usernames or other identifying information about your system. Please review debugs and redact any sensitive information before sharing with external entities.": "",
@@ -2467,6 +2483,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
   "Web Interface HTTP Port": "",
@@ -2607,6 +2624,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -2639,10 +2657,16 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": " Когда <b>Режим ИБП</b> установлен в <i>ведомый</i>. Введите номер открытого сетевого порта <i>ведущей</i> системы ИБП. Порт по умолчанию - <i>3493</i>.",
   " seconds.": " секунд.",
   "% of all cores": "% от всех ядер",
@@ -3185,7 +3209,6 @@
   "Define the size of the raw file in GiB.": "Определите размер необработанного файла в ГиБ.",
   "Define the target as *iSCSI*, *Fibre Channel*, or *Both*.": "Определите цель как *iSCSI*, *Fibre Channel* или *Оба*.",
   "Delay Updates": "Задержать обновления",
-  "Delay VM Boot Until VNC Connects": "Задержвать загрузку VM до подключения VNC",
   "Delete": "Удалить",
   "Delete Device": "Удалить устройство",
   "Delete Virtual Machine": "Удалить виртуальную машину",
@@ -3366,7 +3389,6 @@
   "Endpoint URL": "URL конечной точки",
   "Endpoint type to choose from the service catalogue. <i>Public</i> is recommended, see the <a href=\"https://rclone.org/swift/#swift-region\" target=\"_blank\">rclone documentation</a>.": "Endpoint type to choose from the service catalogue. <i>Public</i> is recommended, see the <a href=\"https://rclone.org/swift/#swift-region\" target=\"_blank\">rclone documentation</a>.",
   "Enter a Name (optional)": "Введите имя (не обязательно)",
-  "Enter a VNC password to automatically pass to the VNC session.": "Введите пароль VNC для автоматической передачи VNC сессии.",
   "Enter a description of the Cloud Sync Task.": "Введите описание задачи облачной синхронизации.",
   "Enter a description of the cron job.": "Введите описание задания cron.",
   "Enter a description of the interface.": "Введите описание интерфейса.",
@@ -4171,10 +4193,8 @@
   "Select a schedule preset or choose <i>Custom</i>                to open the advanced scheduler.": "Выберите предустановленное расписание или выберите <i>Пользовательский</i>, чтобы открыть расширенный планировщик.",
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "Выберите предустановленное расписание или выберите <i>Пользовательский</i>, чтобы открыть расширенный планировщик.",
   "Select a schema when Samba Schema is set.": "Выберите схему, когда установлена Samba Schema.",
-  "Select a screen resolution to use for VNC sessions.": "Выберите разрешение экрана для использования в сеансах VNC.",
   "Select a time zone.": "Выберите часовой пояс.",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "Выберите учетную запись пользователя для запуска команды. Пользователь должен иметь разрешения, позволяющие ему запускать команду или сценарий.",
-  "Select an IP address to use for VNC sessions.": "Выберите IP-адрес для использования в сеансах VNC.",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "Выберите существующее соединение SSH с удаленной системой или выберите <i>Создать новое</i>, чтобы создать новое соединение SSH.",
   "Select an existing extent.": "Выберите существующий экстент.",
   "Select an existing portal or choose <i>Create New</i> to configure a new portal.": "Выберите существующий портал или выберите <i>Создать новый</i>, чтобы настроить новый портал.",
@@ -4257,7 +4277,6 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "Установите для запуска этой задачи репликации сразу после завершения связанной периодической задачи моментального снимка или продолжайте для создания отдельного <b>Расписание</b> для этой репликации.",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "Установите для включения DHCP. Оставьте неустановленным, чтобы создать статическую конфигурацию IPv4 или IPv6. Только один интерфейс может быть настроен для DHCP.",
   "Set to enable Samba to do DNS updates when joining a domain.": "Установите, чтобы Samba делала обновления DNS при присоединении к домену.",
-  "Set to enable connecting to the VNC web interface.": "Установите, чтобы разрешить подключение к веб-интерфейсу VNC.",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "Установите для включения File eXchange Protocol. Этот параметр делает сервер уязвимым для атак с использованием FTP bounce, поэтому он не рекомендуется.",
   "Set to export the certificate environment variables.": "Установите для экспорта переменных окружения сертификата.",
   "Set to force NFS shares to fail if the Kerberos ticket is unavailable.": "Установите для принудительного сбоя общих ресурсов NFS, если билет Kerberos недоступен.",
@@ -4285,7 +4304,6 @@
   "Set to to enable support for <a href=\"https://tools.ietf.org/html/rfc3410\" target=\"_blank\">SNMP version 3</a>. See <a href=\"http://net-snmp.sourceforge.net/docs/man/snmpd.conf.html\" target=\"_blank\">snmpd.conf(5)</a> for configuration details.": "Установите для включения поддержки <a href=\"https://tools.ietf.org/html/rfc3410\" target=\"_blank\">SNMP версии 3</a>. См <а href=\"http://net-snmp.sourceforge.net/docs/man/snmpd.conf.html\" target=\"_blank\">snmpd.conf(5)</a> для получения подробной информации о конфигурации.",
   "Set up TrueNAS authentication method:": "Настройте метод аутентификации TrueNAS:",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "Устаовите, когда требуется поддержка ACL NFSv4, не требуя от клиента и сервера синхронизации пользователей и групп.",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "Установите, когда пользователь является членом более 16 групп. Это предполагает, что членство в группах настроено правильно на сервере NFS.",
   "Set when using Xen as the iSCSI initiator.": "Установите при использовании Xen в качестве инициатора iSCSI.",
   "Set whether processes can be executed from within this dataset.": "Установите, могут ли процессы выполняться из этого набора данных.",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "Устанавливает стандартные разрешения Unix для домашнего каталога пользователя. Это поле только для чтения для встроенных пользователей.",
@@ -4380,7 +4398,6 @@
   "Successfully saved proactive support settings.": "Успешно сохранены настройки проактивной поддержки.",
   "Sun": "Вс",
   "Support": "Поддержка",
-  "Support >16 groups": "Поддержка >16 групп",
   "Switch Train": "Сменить поезд",
   "Switch update trains?": "Изменить поезд обновлений?",
   "Sync": "Синхронизация",
@@ -4617,7 +4634,6 @@
   "Volume size cannot be zero.": "Размер тома не может быть нулевым.",
   "WARNING": "ВНИМАНИЕ",
   "WARNING: A failover will  temporarily interrupt system services.": "ВНИМАНИЕ: Аварийное переключение временно прерывет системные службы.",
-  "Wait to start VM until VNC client connects.": "Ждать с запуском виртуальной машины, пока клиент VNC не подключится.",
   "Waiting for Active TrueNAS controller to come up...": "Ожидание появления активного контроллера TrueNAS ...",
   "Warning": "Внимание",
   "Warning: iSCSI Target is already in use.</font><br>": "Предупреждение: iSCSI Target уже используется.</font><br>",
diff --git a/src/assets/i18n/sk.json b/src/assets/i18n/sk.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/sk.json
+++ b/src/assets/i18n/sk.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/sl.json b/src/assets/i18n/sl.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/sl.json
+++ b/src/assets/i18n/sl.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/sq.json b/src/assets/i18n/sq.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/sq.json
+++ b/src/assets/i18n/sq.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/sr-latn.json b/src/assets/i18n/sr-latn.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/sr-latn.json
+++ b/src/assets/i18n/sr-latn.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/sr.json b/src/assets/i18n/sr.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/sr.json
+++ b/src/assets/i18n/sr.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/strings.json b/src/assets/i18n/strings.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/strings.json
+++ b/src/assets/i18n/strings.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/sv.json b/src/assets/i18n/sv.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/sv.json
+++ b/src/assets/i18n/sv.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/sw.json b/src/assets/i18n/sw.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/sw.json
+++ b/src/assets/i18n/sw.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/ta.json b/src/assets/i18n/ta.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/ta.json
+++ b/src/assets/i18n/ta.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/te.json b/src/assets/i18n/te.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/te.json
+++ b/src/assets/i18n/te.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/th.json b/src/assets/i18n/th.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/th.json
+++ b/src/assets/i18n/th.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/tr.json b/src/assets/i18n/tr.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/tr.json
+++ b/src/assets/i18n/tr.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/tt.json b/src/assets/i18n/tt.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/tt.json
+++ b/src/assets/i18n/tt.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/udm.json b/src/assets/i18n/udm.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/udm.json
+++ b/src/assets/i18n/udm.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/uk.json b/src/assets/i18n/uk.json
index 81985dde317..88c014aacd9 100644
--- a/src/assets/i18n/uk.json
+++ b/src/assets/i18n/uk.json
@@ -202,6 +202,7 @@
   "De-duplication tables are stored on this special VDEV type. These VDEVs must be sized to X GiB for each X TiB of general storage.": "",
   "Debugs may contain log files with personal information such as usernames or other identifying information about your system.": "",
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
   "Delete Catalog": "",
   "Delete Certificate Authority": "",
@@ -266,6 +267,7 @@
   "Enable Two Factor Authentication Globally": "",
   "Enable Two Factor Authentication for SSH": "",
   "Enable for TrueNAS to periodically review data blocks and identify empty blocks, or obsolete blocks that can be deleted. Unset to use dirty block overwrites (default).": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable this SMB share. Unset to disable this SMB share without deleting it.": "",
   "Enable to use thin provisioning where disk space for this volume is allocated <b>‘on demand’</b> as new writes are received. Use caution when enabling this feature, as writes can fail when the pool is low on space.": "",
   "Enclosure Dashboard": "",
@@ -273,9 +275,10 @@
   "Enclosure Read": "",
   "Enclosure Write": "",
   "Enforce the use of FIPS 140-2 compliant algorithms": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a list of allowed hostnames or IP addresses.    Separate entries by pressing <code>Enter</code>. A more detailed description     with examples can be found     <a href=\"{url}\" target=\"_blank\">here</a>. <br><br>     If neither *Hosts Allow* or *Hosts Deny* contains     an entry, then SMB share access is allowed for any host. <br><br>     If there is a *Hosts Allow* list but no *Hosts Deny* list, then only allow     hosts on the *Hosts Allow* list. <br><br>     If there is a *Hosts Deny* list but no *Hosts Allow* list, then allow all     hosts that are not on the *Hosts Deny* list. <br><br>     If there is both a *Hosts Allow* and *Hosts Deny* list, then allow all hosts     that are on the *Hosts Allow* list. <br><br>     If there is a host not on the *Hosts Allow* and not on the *Hosts Deny* list,     then allow it.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a shell glob pattern to match files and directories to exclude from the backup.": "",
   "Enter a unique name for the dataset. The dataset name length is calculated by adding the length of this field's value and the length of the parent path field value. The length of 'Parent Path' and 'Name' added together cannot exceed 200 characters. Because of this length validation on this field accounts for the parent path as well. Furthermore, the maximum nested directory levels allowed is 50. You can't create a dataset that's at the 51st level in the directory hierarchy after you account for the nested levels in the parent path.": "",
   "Enter path for {label}.{multiple}": "",
@@ -309,6 +312,7 @@
   "For example if you set this value to 5, system will renew certificates that expire in 5 days or less.": "",
   "Force using  <a href=\"https://docs.aws.amazon.com/general/latest/gr/signature-version-2.html\"  target=\"_blank\">Signature Version 2</a> to sign API requests.  Set this only  if your AWS provider does not support default version 4 signatures.": "",
   "Full path to the pool, dataset or directory to share.   The path must reside within a pool. Mandatory.": "",
+  "Generate New Password": "",
   "Generic dataset suitable for any share type.": "",
   "Give your exporter configuration a name": "",
   "Global 2FA": "",
@@ -349,6 +353,7 @@
   "IPMI Write": "",
   "IPs": "",
   "IPv4 Datapoint": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If set, the value will be used to override the default DNS domain name for NFSv4. Specifies the \"Domain\" idmapd.conf setting.": "",
   "Ignore List": "",
@@ -388,6 +393,7 @@
   "Items per page": "",
   "JBOF Read": "",
   "JBOF Write": "",
+  "Jobs History": "",
   "KMIP": "",
   "KMIP Read": "",
   "KMIP Write": "",
@@ -425,6 +431,7 @@
   "Local Groups Name": "",
   "Locks": "",
   "Log Details": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Provider": "",
   "Login To Jira To Submit": "",
@@ -432,6 +439,7 @@
   "Machine": "",
   "Major": "",
   "Manage Container Images": "",
+  "Manage Groups Server-side": "",
   "Managed by TrueCommand": "",
   "Manual disk selection allows you to create VDEVs and add disks to those VDEVs individually.": "",
   "Manual layout": "",
@@ -453,6 +461,7 @@
   "Module": "",
   "Move widget down": "",
   "Move widget up": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "NEW": "",
   "NFS Sessions": "",
@@ -535,6 +544,7 @@
   "Pool imported successfully.": "",
   "Pool updated successfully": "",
   "Post Script": "",
+  "Power Menu": "",
   "Pre Script": "",
   "Privileges": "",
   "Processor": "",
@@ -638,10 +648,12 @@
   "Select VDEV layout. This is the first step in setting up your VDEVs.": "",
   "Select a layout": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select action": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select disks you want to use": "",
   "Select files and directories to exclude from the backup.": "",
   "Select files and directories to include from the backup. Leave empty to include everything.": "",
@@ -664,6 +676,8 @@
   "Set Attribute": "",
   "Set Quota": "",
   "Set the domain name to the username. Unset to prevent name collisions when Allow Trusted Domains is set and multiple domains use the same username.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
+  "Settings Menu": "",
   "Settings saved": "",
   "Setup Pool To Create Custom App": "",
   "Setup Pool To Install": "",
@@ -781,6 +795,7 @@
   "Today": "",
   "Toggle off to defer interface learning until runtime, preventing premature state transitions and potential issues during system startup.": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Topology Summary": "",
   "Total Capacity": "",
   "Total Raw Capacity": "",
@@ -839,11 +854,13 @@
   "View Less": "",
   "Virtualization is not supported": "",
   "WARNING: Adding data VDEVs with different numbers of disks is not recommended.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Warning: Debugs may contain log files with personal information such as usernames or other identifying information about your system. Please review debugs and redact any sensitive information before sharing with external entities.": "",
   "Warning: {n} of {total} docker images could not be deleted.": "",
   "Warning: {n} of {total} docker images could not be updated.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Web Shell Access": "",
   "WebDAV": "",
   "What and When": "",
@@ -879,6 +896,7 @@
   "{checked} exporter: {name}": "",
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -898,10 +916,16 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   " Est. Usable Raw Capacity": " Орієнтовний обсяг корисного простору",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": "Коли <b>Режим ДБЖ</b> встановлений у <i>відомий</i>. Введіть номер відкритого мережного порту <і>провідної</i> ДБЖ. Стандартний порт - <i>3493</i>.",
   " bytes.": "байт.",
@@ -1761,7 +1785,6 @@
   "Define the target as *iSCSI*, *Fibre Channel*, or *Both*.": "Визначте ціль як *iSCSI*, *Fibre Channel* або *Обидва*.",
   "Degraded": "Деградовано",
   "Delay Updates": "Затриматии оновлення",
-  "Delay VM Boot Until VNC Connects": "Затримувати завантаження VM до підключення VNC",
   "Delete": "Видалити",
   "Delete <b>{deviceType} {device}</b>": "Видалити <b>{devicetype} {device}</b>",
   "Delete API Key": "Видалити ключ API",
@@ -2083,7 +2106,6 @@
   "Enter <strong>{pool}</strong> below to confirm": "Введіть <strong>{pool}</strong> нижче для підтвердження",
   "Enter <strong>{zvolName}</strong> below to confirm.": "Введіть <strong>{zvolName}</strong> нижче для підтвердження.",
   "Enter a Name (optional)": "Введіть ім'я (не обов'язково)",
-  "Enter a VNC password to automatically pass to the VNC session.": "Введіть пароль VNC для автоматичної передачі VNC сесії.",
   "Enter a description of the Cloud Sync Task.": "Введіть опис проблеми хмарної синхронізації.",
   "Enter a description of the cron job.": "Введіть опис завдання Cron.",
   "Enter a description of the interface.": "Введіть опис інтерфейсу.",
@@ -3607,11 +3629,9 @@
   "Select a schedule preset or choose <i>Custom</i>  to open the advanced scheduler. Note that an in-progress cron task postpones  any later scheduled instance of the same task until the running task is  complete.": "Виберіть попередні налаштування розкладу або виберіть <i>Custom</i>, щоб відкрити розширений планувальник. Зауважте, що поточне завдання cron відкладає будь-який пізніший запланований екземпляр того самого завдання до завершення поточного завдання.",
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "Виберіть встановлений розклад або виберіть <i>Користувацький</i>, щоб відкрити розширений планувальник.",
   "Select a schema when Samba Schema is set.": "Виберіть схему при встановленні схеми SAMBA.",
-  "Select a screen resolution to use for VNC sessions.": "Виберіть роздільну здатність екрана для використання в сеансах VNC.",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "Виберіть розмір сектора в байтах. <i>За замовчуванням</i> залишає розмір сектора не встановленим і використовує значення томів ZFS. Встановлення розміру сектора змінює як логічний, так і фізичний розмір сектора.",
   "Select a time zone.": "Виберіть часовий пояс.",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "Виберіть обліковий запис користувача, щоб запустити команду. Користувач повинен мати дозволи, які дозволяють йому запустити команду або сценарій.",
-  "Select an IP address to use for VNC sessions.": "Виберіть IP-адресу для використання в сеансах VNC.",
   "Select an existing CSR.": "Виберіть існуючий CSR.",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "Виберіть існуюче з'єднання SSH з віддаленою системою або виберіть <i>Створити нове</i>, щоб створити нове з'єднання SSH.",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "Виберіть наявне підключення SSH до віддаленої системи або виберіть «Створити нове», щоб створити нове підключення SSH.",
@@ -3739,7 +3759,6 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "Встановіть для запуску цієї задачі реплікацію відразу після завершення пов'язаної періодичної задачі моментального знімка або продовжуйте для створення окремого <b>Розклад</b> для цієї реплікації.",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "Встановіть, щоб увімкнути DHCP. Залишіть невстановленим, щоб створити статичну конфігурацію IPv4 або IPv6. Тільки один інтерфейс може бути налаштований для DHCP.",
   "Set to enable Samba to do DNS updates when joining a domain.": "Встановіть, щоб Samba робила оновлення DNS під час приєднання до домену.",
-  "Set to enable connecting to the VNC web interface.": "Встановіть, щоб дозволити підключення до веб-інтерфейсу VNC.",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "Встановіть для увімкнення File eXchange Protocol. Цей параметр робить сервер вразливим для атак із використанням FTP bounce, тому він не рекомендується.",
   "Set to enable the iSCSI extent.": "Встановіть, щоб увімкнути екстент iSCSI.",
   "Set to export the certificate environment variables.": "Встановіть для експорту змінних оточення сертифіката.",
@@ -3781,7 +3800,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "Налаштуйте використання <i>Розкладу</i> замість часового проміжку <i>Відтворення конкретних знімків</i>. Значення Schedule зчитуються протягом періоду часу <i>Replicate Specific Snapshots</i>.",
   "Set up TrueNAS authentication method:": "Налаштуйте метод аутентифікації TrueNAS:",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "Встановіть, коли підтримка ACL NFSV4 необхідна, не вимагаючи користувачів та сервер синхронізації корстувачів та груп.",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "Встановіть, коли користувач є членом понад 16 груп. Це говорить про те, що членство в групі правильно налаштовано на сервері NFS.",
   "Set when using Xen as the iSCSI initiator.": "Встановіть Xen як ініціатор ISCSI.",
   "Set whether processes can be executed from within this dataset.": "Встановіть, чи можуть процеси здійснюватися з цього набору даних.",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "Встановлює стандартні резолюції UNIX для домашнього каталогу користувача. Це поле лише для читання для вбудованих користувачів.",
@@ -3962,7 +3980,6 @@
   "Sun": "Вс",
   "Sunday": "Неділя",
   "Support": "Підтримка",
-  "Support >16 groups": "Підтримка> 16 груп",
   "Swap Size": "Поміняти розмір",
   "Switch Train": "Змініть поїзд",
   "Switch update trains?": "Змінити потяг оновлення?",
@@ -4495,7 +4512,6 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "ПОПЕРЕДЖЕННЯ. Буде завантажено ключі для всіх вкладених наборів даних із застосованим шифруванням.",
   "WARNING: Only the key for the dataset in question will be downloaded.": "ПОПЕРЕДЖЕННЯ: буде завантажено лише ключ відповідного набору даних.",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "ПОПЕРЕДЖЕННЯ. Під час експорту пулу ці невідомі процеси буде припинено.",
-  "Wait to start VM until VNC client connects.": "Зачекайте, щоб запустити VM, поки клієнт VNC не підключиться.",
   "Waiting": "Очікування",
   "Waiting for Active TrueNAS controller to come up...": "Очікування на активний контролер TrueNAS ...",
   "Warning": "Увага",
diff --git a/src/assets/i18n/vi.json b/src/assets/i18n/vi.json
index 5214fea6643..67942ac76c4 100644
--- a/src/assets/i18n/vi.json
+++ b/src/assets/i18n/vi.json
@@ -1052,7 +1052,7 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
   "Delay Updates": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
@@ -1383,6 +1383,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable service": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
@@ -1443,7 +1444,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1464,7 +1465,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1753,6 +1754,7 @@
   "Generate Key": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1942,6 +1944,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -2077,6 +2080,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -2236,6 +2240,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -2282,6 +2287,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -2402,6 +2408,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2824,6 +2831,7 @@
   "Post-script": "",
   "Power": "",
   "Power Management": "",
+  "Power Menu": "",
   "Power Mode": "",
   "Power Off": "",
   "Power Off UPS": "",
@@ -3323,15 +3331,15 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a time zone.": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -3481,7 +3489,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -3522,7 +3530,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -3538,6 +3545,7 @@
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
   "Settings": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Settings saved.": "",
@@ -3772,7 +3780,6 @@
   "Sun": "",
   "Sunday": "",
   "Support": "",
-  "Support >16 groups": "",
   "Support Read": "",
   "Support Write": "",
   "Swap Size": "",
@@ -4084,6 +4091,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -4399,7 +4407,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning": "",
@@ -4412,6 +4420,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Interface": "",
   "Web Interface HTTP -> HTTPS Redirect": "",
@@ -4590,6 +4599,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -4631,11 +4641,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_website_region_endpoints\"  target=\"_blank\">Simple Storage Service Website Endpoints</a>.": "<a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteEndpoints.html\"  target=\"_blank\">S3 API endpoint URL</a>. When using AWS, the endpoint  field can be empty to use the default endpoint for the region, and  available buckets are automatically fetched. Refer to the AWS  Documentation for a list of  <a href=\"https://docs.aws.amazon.com/general/latest/gr/rande.html\\#s3_website_region_endpoints  target=\"_blank\">Simple Storage Service Website Endpoints</a>.",
diff --git a/src/assets/i18n/zh-hans.json b/src/assets/i18n/zh-hans.json
index b6bc80312bb..ca50065d23d 100644
--- a/src/assets/i18n/zh-hans.json
+++ b/src/assets/i18n/zh-hans.json
@@ -43,6 +43,7 @@
   "DS Groups": "",
   "DS Groups Name": "",
   "Dashboard (old)": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
   "Delete Cloud Backup <b>\"{name}\"</b>?": "",
   "Delete group": "",
@@ -56,12 +57,15 @@
   "Enable Integrated Metrics Server": "",
   "Enable Kernel Debug": "",
   "Enable Learning": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enclosure Dashboard": "",
   "Enclosure Options": "",
   "Enclosure Read": "",
   "Enclosure Write": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a list of chat IDs separated by space, comma or semicolon.  To find your chat ID send a message to the bot, group or channel and visit  <a href=\"https://api.telegram.org/bot(BOT_TOKEN)/getUpdates\"  target=\"_blank\">https://api.telegram.org/bot(BOT_TOKEN)/getUpdates</a>.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a shell glob pattern to match files and directories to exclude from the backup.": "",
   "Enter the number of last kept backups.": "",
   "Eula": "",
@@ -72,6 +76,7 @@
   "Failover Now": "",
   "Failover is recommended for new FIPS setting to take effect. Would you like to failover now?": "",
   "Force using  <a href=\"https://docs.aws.amazon.com/general/latest/gr/signature-version-2.html\"  target=\"_blank\">Signature Version 2</a> to sign API requests.  Set this only  if your AWS provider does not support default version 4 signatures.": "",
+  "Generate New Password": "",
   "Global 2FA Enable": "",
   "Gmail": "",
   "Go back": "",
@@ -82,6 +87,7 @@
   "IP of 1st Redfish management interface.": "",
   "IPs": "",
   "IPv4 Datapoint": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If set, the value will be used to override the default DNS domain name for NFSv4. Specifies the \"Domain\" idmapd.conf setting.": "",
   "Implementation Domain": "",
@@ -97,6 +103,7 @@
   "Input the name of container to use.": "",
   "Invalid pool name (please refer to <a href=\"https://openzfs.github.io/openzfs-docs/man/8/zpool-create.8.html#DESCRIPTION\" target=\"_blank\">the documentation</a> for valid rules for pool name)": "",
   "Ipmi": "",
+  "Jobs History": "",
   "Keep Last": "",
   "Kerberos Keytabs": "",
   "Key not set": "",
@@ -107,13 +114,16 @@
   "Limit Pool To A Single Enclosure": "",
   "Limit To {name} Enclosure": "",
   "Local Groups Name": "",
+  "LogOut": "",
   "Machine": "",
+  "Manage Groups Server-side": "",
   "Managed by TrueCommand": "",
   "Maximize Dispersal": "",
   "Maximize Enclosure Dispersal": "",
   "Mixed Capacity": "",
   "Move widget down": "",
   "Move widget up": "",
+  "Multiple Errors": "",
   "NTP Server": "",
   "NVMe-oF Expansion Shelves": "",
   "Name ^ \"Local\" AND \"Web Shell Access\" = true": "",
@@ -144,6 +154,7 @@
   "Please describe:\n1. Steps to reproduce\n2. Expected Result\n3. Actual Result": "",
   "Pool imported successfully.": "",
   "Post Script": "",
+  "Power Menu": "",
   "Pre Script": "",
   "Processor": "",
   "Reboot of the other node is required for FIPS changes.": "",
@@ -175,9 +186,11 @@
   "Select Reporting": "",
   "Select a layout": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select files and directories to exclude from the backup.": "",
   "Select files and directories to include from the backup. Leave empty to include everything.": "",
   "Select paths to exclude": "",
@@ -189,6 +202,8 @@
   "Service Name": "",
   "Session Token Lifetime": "",
   "Session dialect": "",
+  "Set to enable connecting to the SPICE web interface.": "",
+  "Settings Menu": "",
   "Show Logs": "",
   "Size in GiB of refreservation to set on ZFS dataset  where the audit databases are stored. The refreservation specifies the  minimum amount of space guaranteed to the dataset, and counts against  the space available for other datasets in the zpool where the audit  dataset is located.": "",
   "Slot {n}": "",
@@ -214,6 +229,7 @@
   "This action will set all dataset quotas for the removed or invalid users to 0, virtually removing any dataset quota entires for such users. Are you sure you want to proceed?": "",
   "Toggle off to defer interface learning until runtime, preventing premature state transitions and potential issues during system startup.": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Translate App": "",
   "TrueCloud Backup Tasks": "",
   "TrueNAS recommends that the sync setting always  be left to the default of \"Standard\" or increased to \"Always\". The \"Disabled\" setting should  not be used in production and only where data roll back by few seconds  in case of crash or power loss is not a concern.": "",
@@ -222,6 +238,8 @@
   "Value must be greater than {label}": "",
   "Vdevs spans enclosure": "",
   "View Less": "",
+  "Wait to start VM until SPICE client connects.": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Widget Editor": "",
   "Widgets": "",
   "Widgets ({n, plural, =1 {# item} other {# items}})": "",
@@ -243,6 +261,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{days, plural, =1 {# day} other {# days}}": "",
   "{email} via {server}": "",
   "{failedCount} of {allCount, plural, =1 {# task} other {# tasks}} failed": "",
@@ -265,11 +284,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "\n              It looks like your session has been inactive for more than {lifetime} seconds.<br>\n              For security reasons we will log you out at {time}.\n            ": "\n您的会话似乎已超过 {lifetime} 秒处于非活动状态。<br>\n 出于安全原因，我们将在 {time} 后注销您的会话。\n",
   " Est. Usable Raw Capacity": " 估计可用容量",
   " When the <b>UPS Mode</b> is set to <i>slave</i>. Enter the open network port number of the UPS <i>Master</i> system. The default port is <i>3493</i>.": "当 <b>UPS 模式</b> 设置为 <i>附属</i> 时。输入 UPS <i>主</i> 系统的开放端口号。默认端口为 <i>3493</i>。",
@@ -1288,7 +1313,6 @@
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "定义 FTP 会话的控制通道、数据通道、双通道或双通道是否必须通过 SSL/TLS。此策略<a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">在此</a>有说明。",
   "Degraded": "降级",
   "Delay Updates": "延迟更新",
-  "Delay VM Boot Until VNC Connects": "延迟虚拟机启动，直到 VNC 连接",
   "Delete": "删除",
   "Delete <b>{deviceType} {device}</b>": "删除 <b>{deviceType} {device}</b>",
   "Delete API Key": "删除 API 密钥",
@@ -1664,7 +1688,6 @@
   "Enter <strong>{pool}</strong> below to confirm": "在下方输入 <strong>{pool}</strong> 进行确认",
   "Enter <strong>{zvolName}</strong> below to confirm.": "输入存储池名 <strong>{zvolName}</strong> 以确认。",
   "Enter a Name (optional)": "输入名称（可选）",
-  "Enter a VNC password to automatically pass to the VNC session.": "输入 VNC 密码以自动传递到 VNC 会话。",
   "Enter a description of the Cloud Sync Task.": "输入云同步任务的描述。",
   "Enter a description of the cron job.": "输入计划任务的描述。",
   "Enter a description of the interface.": "输入接口的描述。",
@@ -1683,7 +1706,6 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "输入秒数以等待警告服务无法到达任何 UPS 之前等待。警告持续直到问题被解决。",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "输入一到三段的问题描述。描述问题并提供复现问题的任何步骤。",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "输入用于 <i>rancher</i> 用户的密码。这将会用于从串行 shell 登录虚拟机。",
-  "Enter a password for the VNC display.": "输入用于 VNC 显示的密码。",
   "Enter a password of at least eight characters.": "输入至少 8 位字符的密码。",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "输入一个端口以绑定 <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "输入一个端口以绑定 <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.",
@@ -3438,12 +3460,10 @@
   "Select a schedule preset or choose <i>Custom</i>  to open the advanced scheduler. Note that an in-progress cron task postpones  any later scheduled instance of the same task until the running task is  complete.": "选择一个计划预设或选择<i>自定义</i>以打开高级计划程序。请注意，正在进行的定时任务会推迟同一任务的任何后续计划实例，直到正在运行的任务完成。",
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "选择计划预设或选择<i>「自定义」</i>以打开高级计划程序。",
   "Select a schema when Samba Schema is set.": "设置 Samba 架构时选择架构。",
-  "Select a screen resolution to use for VNC sessions.": "选择一个用于 VNC 会话的分辨率。",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "选择以字节为单位的扇区大小。<i>默认</i>未设置扇区大小，并使用 ZFS 卷值。设置扇区大小会同时更改逻辑和物理扇区大小。",
   "Select a time zone.": "选择时区。",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "选择一个用户帐户以运行命令。用户必须具有允许他们运行命令或脚本的权限。",
   "Select action": "选择动作",
-  "Select an IP address to use for VNC sessions.": "选择要用于 VNC 会话的 IP 地址。",
   "Select an existing CSR.": "选择一个现有的 CSR.",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "选择与远程系统的现有 SSH 连接，或选择<i>新建</i>创建新的 SSH 连接。",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "选择与远程系统的现有 SSH 连接，或选择新建以创建新的 SSH 连接。",
@@ -3582,7 +3602,6 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "设置为在链接的定期快照任务完成后立即启动此复制任务，或者继续为此复制创建单独的<b>计划</b>。",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "设置来启用 DHCP。保持未设置来创建一个静态 IPv4 或 IPv6 配置。只有一个网络接口可以配置用于 DHCP。",
   "Set to enable Samba to do DNS updates when joining a domain.": "设置为在加入域时启用 Samba 进行 DNS 更新。",
-  "Set to enable connecting to the VNC web interface.": "设置为启用连接到 VNC Web 界面。",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "设置为启用文件更改协议。此选项使服务器容易受到 FTP 反弹攻击，因此不建议这样做。",
   "Set to enable the iSCSI extent.": "设置为启用 iSCSI Extent。",
   "Set to export the certificate environment variables.": "设置为导出证书环境变量。",
@@ -3624,7 +3643,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "设置使用<i>计划</i>代替<i>复制特定快照</i>时间范围。在<i>复制特定快照</i>时间范围内读取计划值。",
   "Set up TrueNAS authentication method:": "设置 TrueNAS 的鉴权方式",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "在需要 NFSv4 ACL 支持时设置，无需客户端和服务器同步用户和组。",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "当用户是超过 16 个组的成员时设置。这假定在 NFS 服务器上正确配置了组成员身份。",
   "Set when using Xen as the iSCSI initiator.": "使用 Xen 作为 iSCSI 启动器时设置。",
   "Set whether processes can be executed from within this dataset.": "设置是否可以在此数据集中执行流程。",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "设置用户主目录的默认 Unix 权限。这对于内置用户是只读的。",
@@ -3865,7 +3883,6 @@
   "Sun": "周日",
   "Sunday": "周日",
   "Support": "支持",
-  "Support >16 groups": "支持多于 16 个组",
   "Support Read": "支持读取",
   "Support Write": "支持写入",
   "Swap Size": "Swap 大小",
@@ -4480,7 +4497,6 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "警告：将下载应用加密的所有嵌套数据集的密钥。",
   "WARNING: Only the key for the dataset in question will be downloaded.": "警告：只会下载相关数据集的密钥。",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "警告：这些未知进程将在导出池时终止。",
-  "Wait to start VM until VNC client connects.": "等待启动虚拟机，直到 VNC 客户端连接。",
   "Waiting": "等待中",
   "Waiting for Active TrueNAS controller to come up...": "在等待 TrueNAS 系统启动...",
   "Warning": "警告",
diff --git a/src/assets/i18n/zh-hant.json b/src/assets/i18n/zh-hant.json
index 36149192c8f..5c5c526d84f 100644
--- a/src/assets/i18n/zh-hant.json
+++ b/src/assets/i18n/zh-hant.json
@@ -809,7 +809,7 @@
   "Define the target as *iSCSI*, *Fibre Channel*, or *Both*.": "",
   "Define whether the control channel,  data channel, both channels, or neither channel of an FTP  session must occur over SSL/TLS. The policies are described  <a href=\"http://www.proftpd.org/docs/directives/configuration_full.html#TLSREQUIRED\" target=\"_blank\">here</a>": "",
   "Degraded": "",
-  "Delay VM Boot Until VNC Connects": "",
+  "Delay VM Boot Until SPICE Connects": "",
   "Delete <b>{deviceType} {device}</b>": "",
   "Delete API Key": "",
   "Delete Alert Service <b>\"{name}\"</b>?": "",
@@ -1054,6 +1054,7 @@
   "Enable iXsystems Proactive Support": "",
   "Enable passwordless sudo for zfs commands": "",
   "Enable sending anonymous usage statistics to iXsystems.": "",
+  "Enable server-side management of group memberships.  This option allows the server to determine group IDs based on server-side lookups rather than relying solely on the information provided by the NFS client.  This can support more than 16 groups and provide more accurate group memberships.": "",
   "Enable support for the File Server Remote VSS Protocol  (<a href=\"https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fsrvp\" target=\"_blank\">FSVRP</a>).  This protocol allows RPC clients to manage snapshots for a specific SMB share.  The share path must be a dataset mountpoint. Snapshots have the prefix  <code>fss-</code> followed by a snapshot creation timestamp. A snapshot must have  this prefix for an RPC user to delete it.": "",
   "Enable the Active Directory service. The first time this option is set, the Domain Account Password must be entered.": "",
   "Enable the SNMPv3 security model.": "",
@@ -1105,7 +1106,7 @@
   "Enter <strong>{pool}</strong> below to confirm": "",
   "Enter <strong>{zvolName}</strong> below to confirm.": "",
   "Enter a Name (optional)": "",
-  "Enter a VNC password to automatically pass to the VNC session.": "",
+  "Enter a SPICE password to automatically pass to the SPICE session.": "",
   "Enter a description of the Cloud Backup Task.": "",
   "Enter a description of the Cloud Sync Task.": "",
   "Enter a description of the cron job.": "",
@@ -1125,7 +1126,7 @@
   "Enter a number of seconds to wait before alerting that the service cannot reach any UPS. Warnings continue until the situation is fixed.": "",
   "Enter a one to three paragraph summary of the issue. Describe the problem and provide any steps to replicate the issue.": "",
   "Enter a password for the <i>rancher</i> user. This is used to log in to the VM from the serial shell.": "",
-  "Enter a password for the VNC display.": "",
+  "Enter a password for the SPICE display.": "",
   "Enter a password of at least eight characters.": "",
   "Enter a port to bind <a href=\"https://linux.die.net/man/8/rpc.lockd\" target=\"_blank\">rpc.lockd(8)</a>.": "",
   "Enter a port to bind <a href=\"https://man7.org/linux/man-pages/man8/mountd.8.html\" target=\"_blank\">mountd(8)</a>.": "",
@@ -1359,6 +1360,7 @@
   "Generate": "",
   "Generate Keypair": "",
   "Generate New": "",
+  "Generate New Password": "",
   "Generate a name for the snapshot  using the naming schema from a previously created <b>Periodic Snapshot Task</b>.  This allows the snapshot to be replicated. Cannot be used with a <i>Name</i>.": "",
   "Generate an alert when the    pool has this percent space remaining. This is typically    configured at the pool level when using zvols or at the extent level    for both file and device based extents.": "",
   "Generate idmap low range based on same algorithm that SSSD uses by default.": "",
@@ -1503,6 +1505,7 @@
   "Idle": "",
   "Idmap": "",
   "Idmap Backend": "",
+  "If automatic login has failed, please try the following credentials manually.": "",
   "If checked, disks of the selected size or larger will be used. If unchecked, only disks of the selected size will be used.": "",
   "If downloading a file returns the error \"This file has been identified as malware or spam and cannot be downloaded\" with the error code \"cannotDownloadAbusiveFile\" then enable this flag to indicate you acknowledge the risks of downloading the file and TrueNAS will download it anyway.": "",
   "If selected, sets several environment variables.": "",
@@ -1617,6 +1620,7 @@
   "Jan": "",
   "Job {job} Completed Successfully": "",
   "Jobs": "",
+  "Jobs History": "",
   "Jul": "",
   "Jun": "",
   "KDC": "",
@@ -1741,6 +1745,7 @@
   "Log Path": "",
   "Log VDEVs": "",
   "Log in to Gmail to set up Oauth credentials.": "",
+  "LogOut": "",
   "Logged In To Gmail": "",
   "Logged In To Jira": "",
   "Logged In To Provider": "",
@@ -1779,6 +1784,7 @@
   "Manage Disks": "",
   "Manage Global SED Password": "",
   "Manage Group Quotas": "",
+  "Manage Groups Server-side": "",
   "Manage Installed Apps": "",
   "Manage NFS Shares": "",
   "Manage Replication Tasks": "",
@@ -1877,6 +1883,7 @@
   "Multi-domain support. Enter additional domains to  secure. Separate domains by pressing <code>Enter</code>  For example, if the primary domain is <i>example.com</i>,  entering <i>www.example.com</i> secures both addresses.": "",
   "Multicast DNS. Uses the system <i>Hostname</i> to  advertise enabled and running services. For example, this controls if  the server appears under <i>Network</i> on MacOS clients.": "",
   "Multichannel": "",
+  "Multiple Errors": "",
   "Multiprotocol": "",
   "Must be part of a pool to check errors": "",
   "Must match Windows workgroup name.  When this is unconfigured and Active Directory or LDAP are active,  TrueNAS will detect and set the correct workgroup from these services.": "",
@@ -2227,6 +2234,7 @@
   "Post Init": "",
   "Post Script": "",
   "Post-script": "",
+  "Power Menu": "",
   "Pre Init": "",
   "Pre Script": "",
   "Pre-script": "",
@@ -2623,14 +2631,14 @@
   "Select a schedule preset or choose <i>Custom</i> to open the advanced scheduler.": "",
   "Select a schedule preset or choose <i>Custom</i> to setup custom schedule.": "",
   "Select a schema when Samba Schema is set.": "",
-  "Select a screen resolution to use for VNC sessions.": "",
+  "Select a screen resolution to use for SPICE sessions.": "",
   "Select a sector size in bytes. <i>Default</i> leaves the sector size unset and uses the ZFS volume values. Setting a sector size changes both the logical and physical sector size.": "",
   "Select a subfolder from which to restore content.": "",
   "Select a template": "",
   "Select a user account to run the command. The                user must have permissions allowing them to run                the command or script.": "",
   "Select action": "",
-  "Select an IP address to use for VNC sessions.": "",
-  "Select an IP address to use for remote VNC sessions. Note: this setting only applies if you are using a VNC client other than the TrueNAS WebUI.": "",
+  "Select an IP address to use for SPICE sessions.": "",
+  "Select an IP address to use for remote SPICE sessions. Note: this setting only applies if you are using a SPICE client other than the TrueNAS WebUI.": "",
   "Select an existing CSR.": "",
   "Select an existing SSH connection  to a remote system or choose <i>Create New</i> to create a new SSH  connection.": "",
   "Select an existing SSH connection to a remote system or   choose Create New to create a new SSH connection.": "",
@@ -2766,7 +2774,7 @@
   "Set to either start this replication task  immediately after the linked periodic snapshot task completes or  continue to create a separate <b>Schedule</b> for this replication.": "",
   "Set to enable DHCP. Leave unset to create a static IPv4 or IPv6 configuration. Only one interface can be configured for DHCP.": "",
   "Set to enable Samba to do DNS updates when joining a domain.": "",
-  "Set to enable connecting to the VNC web interface.": "",
+  "Set to enable connecting to the SPICE web interface.": "",
   "Set to enable the File eXchange Protocol. This option makes the server vulnerable to FTP bounce attacks so it is not recommended.": "",
   "Set to enable the iSCSI extent.": "",
   "Set to export the certificate environment variables.": "",
@@ -2807,7 +2815,6 @@
   "Set to use the <i>Schedule</i> in place  of the <i>Replicate Specific Snapshots</i> time frame. The Schedule values are  read over the <i>Replicate Specific Snapshots</i> time frame.": "",
   "Set up TrueNAS authentication method:": "",
   "Set when NFSv4 ACL support is needed without requiring the client and the server to sync users and groups.": "",
-  "Set when a user is a member of more than 16 groups. This assumes group membership is configured correctly on the NFS server.": "",
   "Set when using Xen as the iSCSI initiator.": "",
   "Set whether processes can be executed from within this dataset.": "",
   "Sets default Unix permissions of the user home directory. This is read-only for built-in users.": "",
@@ -2822,6 +2829,7 @@
   "Setting this option is discouraged as it increases security risk.": "",
   "Setting this option reduces the security of the connection, so only use it if the client does not understand reused SSL sessions.": "",
   "Setting this option will result in timeouts if <b>identd</b> is not running on the client.": "",
+  "Settings Menu": "",
   "Settings Requiring Re-Initialization": "",
   "Settings saved": "",
   "Setup Method": "",
@@ -3279,6 +3287,7 @@
   "Token created with  <a href=\"https://developers.google.com/drive/api/v3/about-auth\" target=\"_blank\">Google Drive</a>. Access Tokens expire periodically and  must be refreshed.": "",
   "Token expired": "",
   "Tolerance Window": "",
+  "Toolbar": "",
   "Top level of the LDAP directory tree to be used when searching for resources. Example: <i>dc=test,dc=org</i>.": "",
   "Topic <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\" target=\"_blank\">Amazon Resource Name (ARN)</a> for publishing. Example: <b>arn:aws:sns:us-west-2:111122223333:MyTopic</b>.": "",
   "Topology": "",
@@ -3532,7 +3541,7 @@
   "WARNING: Keys for all nested datasets with encryption applied will be downloaded.": "",
   "WARNING: Only the key for the dataset in question will be downloaded.": "",
   "WARNING: These unknown processes will be terminated while exporting the pool.": "",
-  "Wait to start VM until VNC client connects.": "",
+  "Wait to start VM until SPICE client connects.": "",
   "Waiting": "",
   "Waiting for Active TrueNAS controller to come up...": "",
   "Warning!": "",
@@ -3544,6 +3553,7 @@
   "Warning: {n} of {total} snapshots could not be deleted.": "",
   "Warnings": "",
   "Watch List": "",
+  "We've generated a Netdata password and attempted to automatically log you in in a new tab.": "",
   "Weak Ciphers": "",
   "Web Shell Access": "",
   "WebDAV": "",
@@ -3696,6 +3706,7 @@
   "{comparator} (Range In)": "",
   "{comparator} (Range Not In)": "",
   "{comparator} (Starts With)": "",
+  "{coreCount, plural, one {# core} other {# cores} }": "",
   "{count} snapshots found.": "",
   "{cpuPercentage}% Avg. Usage": "",
   "{days, plural, =1 {# day} other {# days}}": "",
@@ -3737,11 +3748,17 @@
   "{tasks, plural, =1 {# received task} other {# received tasks}} this week": "",
   "{tasks, plural, =1 {# send task} other {# send tasks}}": "",
   "{tasks, plural, =1 {# sent task} other {# sent tasks}} this week": "",
+  "{temp}°C (All Threads)": "",
+  "{temp}°C (Core #{core})": "",
+  "{temp}°C ({coreCount} cores at {temp}°C)": "",
   "{type} VDEVs": "",
   "{type} at {location}": "",
   "{type} widget does not support {size} size.": "",
   "{type} widget is not supported.": "",
   "{type} | {vdevWidth} wide | ": "",
+  "{usage}% (All Threads)": "",
+  "{usage}% (Thread #{thread})": "",
+  "{usage}% ({threadCount} threads at {usage}%)": "",
   "{used} of {total} ({used_pct})": "",
   "{version} is available!": "",
   " seconds.": " 秒。",
@@ -4532,7 +4549,6 @@
   "Subject": "主旨",
   "Success": "成功",
   "Support": "支援",
-  "Support >16 groups": "支援大於 16 個群組",
   "Sync": "同步",
   "System": "系統",
   "System Clock": "系統時鐘",
diff --git a/src/assets/ui-searchable-elements.json b/src/assets/ui-searchable-elements.json
index 988c670efa8..e3afbac006a 100644
--- a/src/assets/ui-searchable-elements.json
+++ b/src/assets/ui-searchable-elements.json
@@ -1,4 +1,191 @@
 [
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Jobs History"
+    ],
+    "synonyms": [
+      "Toolbar"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "jobs-history",
+    "triggerAnchor": null,
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Power Menu"
+    ],
+    "synonyms": [
+      "Toolbar",
+      "Power Menu"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "power-menu",
+    "triggerAnchor": "power-menu",
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Power Menu",
+      "LogOut"
+    ],
+    "synonyms": [
+      "Toolbar",
+      "Power Menu"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "logout",
+    "triggerAnchor": "power-menu",
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Power Menu",
+      "Restart"
+    ],
+    "synonyms": [
+      "Toolbar",
+      "Power Menu"
+    ],
+    "requiredRoles": [
+      "FULL_ADMIN"
+    ],
+    "routerLink": null,
+    "anchor": "restart",
+    "triggerAnchor": "power-menu",
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Power Menu",
+      "Shut Down"
+    ],
+    "synonyms": [
+      "Toolbar",
+      "Power Menu"
+    ],
+    "requiredRoles": [
+      "FULL_ADMIN"
+    ],
+    "routerLink": null,
+    "anchor": "shut-down",
+    "triggerAnchor": "power-menu",
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Send Feedback"
+    ],
+    "synonyms": [
+      "Toolbar"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "send-feedback",
+    "triggerAnchor": null,
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Alerts"
+    ],
+    "synonyms": [
+      "Toolbar"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "alerts",
+    "triggerAnchor": null,
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Settings Menu"
+    ],
+    "synonyms": [
+      "Toolbar",
+      "Settings Menu"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "user-menu",
+    "triggerAnchor": "user-menu",
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Settings Menu",
+      "Change Password"
+    ],
+    "synonyms": [
+      "Toolbar",
+      "Settings Menu"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "change-password",
+    "triggerAnchor": "user-menu",
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Settings Menu",
+      "Guide"
+    ],
+    "synonyms": [
+      "Toolbar",
+      "Settings Menu"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "guide",
+    "triggerAnchor": "user-menu",
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Settings Menu",
+      "About"
+    ],
+    "synonyms": [
+      "Toolbar",
+      "Settings Menu"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "about",
+    "triggerAnchor": "user-menu",
+    "section": "ui"
+  },
+  {
+    "hierarchy": [
+      "Toolbar",
+      "Status of TrueCommand"
+    ],
+    "synonyms": [
+      "TrueCommand",
+      "Toolbar"
+    ],
+    "requiredRoles": [],
+    "routerLink": null,
+    "anchor": "tc-status",
+    "triggerAnchor": null,
+    "section": "ui"
+  },
   {
     "hierarchy": [
       "Credentials",
diff --git a/tsconfig.json b/tsconfig.json
index 9da3b36abd2..dea5b2e45d8 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -18,7 +18,7 @@
     "target": "ES2022",
     "allowSyntheticDefaultImports": true,
     "lib": [
-      "es2020",
+      "es2023",
       "dom",
       "dom.Iterable"
     ],
diff --git a/yarn.lock b/yarn.lock
index c9eff462103..20090c5127c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4606,10 +4606,10 @@
   resolved "https://registry.yarnpkg.com/@types/json5/-/json5-0.0.29.tgz#ee28707ae94e11d2b827bcbe5270bcea7f3e71ee"
   integrity sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==
 
-"@types/lodash@4.14.195":
-  version "4.14.195"
-  resolved "https://registry.yarnpkg.com/@types/lodash/-/lodash-4.14.195.tgz#bafc975b252eb6cea78882ce8a7b6bf22a6de632"
-  integrity sha512-Hwx9EUgdwf2GLarOjQp5ZH8ZmblzcbTBC2wtQWNKARBSxM9ezRIAUpeDTgoQRAFB0+8CNWXVA9+MaSOzOF3nPg==
+"@types/lodash@4.17.0":
+  version "4.17.0"
+  resolved "https://registry.yarnpkg.com/@types/lodash/-/lodash-4.17.0.tgz#d774355e41f372d5350a4d0714abb48194a489c3"
+  integrity sha512-t7dhREVv6dbNj0q17X12j7yDG4bD/DHYX7o5/DbDxobP0HnGPgpRz2Ej77aL7TZT3DSw13fqUTj8J4mMnqa7WA==
 
 "@types/marked@^4.3.0":
   version "4.3.2"